{"id":"ASB-A-499091487", "published":"2026-09-01T00:00:00Z", "modified":"2026-09-10T15:43:18.983809180Z", "aliases":["CVE-2026-55290", "A-499091487"], "affected":[{"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17-next:0"}, {"fixed":"17-next:2026-09-01"}]}], "versions":["17-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/968cb0736ca65b22a3c7230820912adffa452b1e"], "severity":"High", "spl":"2026-09-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"82927214188281483027407755748785347527", "length":7521}, "id":"ASB-A-499091487-812ba99d", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/968cb0736ca65b22a3c7230820912adffa452b1e", "target":{"file":"libs/androidfw/ResourceTypes.cpp", "function":"ResStringPool::setTo"}}, {"deprecated":false, "digest":{"line_hashes":["88958440904460497466319070628507512145", "308094730269684789193377031438851988280", "149543111414257474815542172975173080566", "197460429687274194980235530983418745832", "160247247945018854162786087294752691740", "161130232973007711014190462255313502703", "64423158904939564595540958825540183875", "179328279256324776839278103542427480684", "267598622964433476085441998512542255931", "118327174711115137808705309722244310013", "104858848947964987160830302403517661649", "130522839896885241388152400567527703555", "66806255186088284987293822666513622897", "96896572782832791328411877253452490085", "200945432685477963557656037427954248813", "123927014082303466244311091545631431393", "258909741659923299611219088770757843110", "239393316848012953757523240799303122435", "183896264587861673598148935309463180915", "160604242386151727215178653780606597400", "210949481534006291668838556491400974916", "337814240897319559102765744692188941287", "185491210705835820856068630844988561431", "113412598032795088045255255379303606215", "306572923216154041055704698458741029683", "146292951287316629006329247049540378873", "332327962866772784024985154157400931817"], "threshold":0.9}, "id":"ASB-A-499091487-b26d9327", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/968cb0736ca65b22a3c7230820912adffa452b1e", "target":{"file":"libs/androidfw/ResourceTypes.cpp"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"15:0"}, {"fixed":"15:2026-09-01"}]}], "versions":["15"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/fd6d49e8bfcc4c42e380e01baf6e186c33916bcb"], "severity":"High", "spl":"2026-09-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["88958440904460497466319070628507512145", "308094730269684789193377031438851988280", "149543111414257474815542172975173080566", "197460429687274194980235530983418745832", "160247247945018854162786087294752691740", "161130232973007711014190462255313502703", "64423158904939564595540958825540183875", "179328279256324776839278103542427480684", "267598622964433476085441998512542255931", "118327174711115137808705309722244310013", "104858848947964987160830302403517661649", "130522839896885241388152400567527703555", "66806255186088284987293822666513622897", "96896572782832791328411877253452490085", "200945432685477963557656037427954248813", "123927014082303466244311091545631431393", "258909741659923299611219088770757843110", "239393316848012953757523240799303122435", "183896264587861673598148935309463180915", "160604242386151727215178653780606597400", "210949481534006291668838556491400974916", "337814240897319559102765744692188941287", "185491210705835820856068630844988561431", "113412598032795088045255255379303606215", "306572923216154041055704698458741029683", "146292951287316629006329247049540378873", "332327962866772784024985154157400931817"], "threshold":0.9}, "id":"ASB-A-499091487-2831ab10", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/fd6d49e8bfcc4c42e380e01baf6e186c33916bcb", "target":{"file":"libs/androidfw/ResourceTypes.cpp"}}, {"deprecated":false, "digest":{"function_hash":"82927214188281483027407755748785347527", "length":7521}, "id":"ASB-A-499091487-fa55ad7c", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/fd6d49e8bfcc4c42e380e01baf6e186c33916bcb", "target":{"file":"libs/androidfw/ResourceTypes.cpp", "function":"ResStringPool::setTo"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16:0"}, {"fixed":"16:2026-09-01"}]}], "versions":["16"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/f4a6d1160920868b9ba354f84023e39371a8c2ba"], "severity":"High", "spl":"2026-09-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"82927214188281483027407755748785347527", "length":7521}, "id":"ASB-A-499091487-023aadd5", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/f4a6d1160920868b9ba354f84023e39371a8c2ba", "target":{"file":"libs/androidfw/ResourceTypes.cpp", "function":"ResStringPool::setTo"}}, {"deprecated":false, "digest":{"line_hashes":["88958440904460497466319070628507512145", "308094730269684789193377031438851988280", "149543111414257474815542172975173080566", "197460429687274194980235530983418745832", "160247247945018854162786087294752691740", "161130232973007711014190462255313502703", "64423158904939564595540958825540183875", "179328279256324776839278103542427480684", "267598622964433476085441998512542255931", "118327174711115137808705309722244310013", "104858848947964987160830302403517661649", "130522839896885241388152400567527703555", "66806255186088284987293822666513622897", "96896572782832791328411877253452490085", "200945432685477963557656037427954248813", "123927014082303466244311091545631431393", "258909741659923299611219088770757843110", "239393316848012953757523240799303122435", "183896264587861673598148935309463180915", "160604242386151727215178653780606597400", "210949481534006291668838556491400974916", "337814240897319559102765744692188941287", "185491210705835820856068630844988561431", "113412598032795088045255255379303606215", "306572923216154041055704698458741029683", "146292951287316629006329247049540378873", "332327962866772784024985154157400931817"], "threshold":0.9}, "id":"ASB-A-499091487-d134417b", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/f4a6d1160920868b9ba354f84023e39371a8c2ba", "target":{"file":"libs/androidfw/ResourceTypes.cpp"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16-qpr2:0"}, {"fixed":"16-qpr2:2026-09-01"}]}], "versions":["16-qpr2"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/42e2f10a060bc130317e8e7f6bb7a146575938d6"], "severity":"High", "spl":"2026-09-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"82927214188281483027407755748785347527", "length":7521}, "id":"ASB-A-499091487-989b50c8", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/42e2f10a060bc130317e8e7f6bb7a146575938d6", "target":{"file":"libs/androidfw/ResourceTypes.cpp", "function":"ResStringPool::setTo"}}, {"deprecated":false, "digest":{"line_hashes":["88958440904460497466319070628507512145", "308094730269684789193377031438851988280", "149543111414257474815542172975173080566", "197460429687274194980235530983418745832", "160247247945018854162786087294752691740", "161130232973007711014190462255313502703", "64423158904939564595540958825540183875", "179328279256324776839278103542427480684", "267598622964433476085441998512542255931", "118327174711115137808705309722244310013", "104858848947964987160830302403517661649", "130522839896885241388152400567527703555", "66806255186088284987293822666513622897", "96896572782832791328411877253452490085", "200945432685477963557656037427954248813", "123927014082303466244311091545631431393", "258909741659923299611219088770757843110", "239393316848012953757523240799303122435", "183896264587861673598148935309463180915", "160604242386151727215178653780606597400", "210949481534006291668838556491400974916", "337814240897319559102765744692188941287", "185491210705835820856068630844988561431", "113412598032795088045255255379303606215", "306572923216154041055704698458741029683", "146292951287316629006329247049540378873", "332327962866772784024985154157400931817"], "threshold":0.9}, "id":"ASB-A-499091487-b9ae7da1", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/42e2f10a060bc130317e8e7f6bb7a146575938d6", "target":{"file":"libs/androidfw/ResourceTypes.cpp"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17:0"}, {"fixed":"17:2026-09-01"}]}], "versions":["17"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/0aa6ef39a4277197f1a216904fcb8e1c034c4299"], "severity":"High", "spl":"2026-09-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["88958440904460497466319070628507512145", "308094730269684789193377031438851988280", "149543111414257474815542172975173080566", "197460429687274194980235530983418745832", "160247247945018854162786087294752691740", "161130232973007711014190462255313502703", "64423158904939564595540958825540183875", "179328279256324776839278103542427480684", "267598622964433476085441998512542255931", "118327174711115137808705309722244310013", "104858848947964987160830302403517661649", "130522839896885241388152400567527703555", "66806255186088284987293822666513622897", "96896572782832791328411877253452490085", "200945432685477963557656037427954248813", "123927014082303466244311091545631431393", "258909741659923299611219088770757843110", "239393316848012953757523240799303122435", "183896264587861673598148935309463180915", "160604242386151727215178653780606597400", "210949481534006291668838556491400974916", "337814240897319559102765744692188941287", "185491210705835820856068630844988561431", "113412598032795088045255255379303606215", "306572923216154041055704698458741029683", "146292951287316629006329247049540378873", "332327962866772784024985154157400931817"], "threshold":0.9}, "id":"ASB-A-499091487-05b84fe7", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/0aa6ef39a4277197f1a216904fcb8e1c034c4299", "target":{"file":"libs/androidfw/ResourceTypes.cpp"}}, {"deprecated":false, "digest":{"function_hash":"82927214188281483027407755748785347527", "length":7521}, "id":"ASB-A-499091487-787ac51a", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/0aa6ef39a4277197f1a216904fcb8e1c034c4299", "target":{"file":"libs/androidfw/ResourceTypes.cpp", "function":"ResStringPool::setTo"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"14:0"}, {"fixed":"14:2026-09-01"}]}], "versions":["14"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/72a322b401716222debbb8bd94e87ed805939224"], "severity":"High", "spl":"2026-09-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"249077544555284930475303052642442529713", "length":7292}, "id":"ASB-A-499091487-376d790a", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/72a322b401716222debbb8bd94e87ed805939224", "target":{"file":"libs/androidfw/ResourceTypes.cpp", "function":"ResStringPool::setTo"}}, {"deprecated":false, "digest":{"line_hashes":["88958440904460497466319070628507512145", "308094730269684789193377031438851988280", "149543111414257474815542172975173080566", "197460429687274194980235530983418745832", "160247247945018854162786087294752691740", "161130232973007711014190462255313502703", "64423158904939564595540958825540183875", "179328279256324776839278103542427480684", "267598622964433476085441998512542255931", "118327174711115137808705309722244310013", "104858848947964987160830302403517661649", "130522839896885241388152400567527703555", "66806255186088284987293822666513622897", "96896572782832791328411877253452490085", "200945432685477963557656037427954248813", "123927014082303466244311091545631431393", "258909741659923299611219088770757843110", "239393316848012953757523240799303122435", "183896264587861673598148935309463180915", "160604242386151727215178653780606597400", "210949481534006291668838556491400974916", "337814240897319559102765744692188941287", "185491210705835820856068630844988561431", "113412598032795088045255255379303606215", "306572923216154041055704698458741029683", "146292951287316629006329247049540378873", "332327962866772784024985154157400931817"], "threshold":0.9}, "id":"ASB-A-499091487-3a6c16a1", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/72a322b401716222debbb8bd94e87ed805939224", "target":{"file":"libs/androidfw/ResourceTypes.cpp"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2026-09-01"}]}