{"id":"ASB-A-513581389", "published":"2026-09-01T00:00:00Z", "modified":"2026-09-09T15:15:54.249544283Z", "aliases":["CVE-2026-55256", "A-513581389"], "details":"In parsePartHeaders of multiple files, there is a possible persistent denial of service due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/development", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17-next:0"}, {"fixed":"17-next:2026-09-01"}]}], "versions":["17-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/development/+/d72b3170cb597b52eb792d81290084fe92bf1ef9"], "severity":"Critical", "spl":"2026-09-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["142753661400032712952520225180075874283", "279718015445828485956211179825455582116", "293808198340319723335735378833586477118", "228380082209694445135472943080580415479", "146694696859313837855813612844997967728", "95153332327285614191313206450219384003", "53207138459955910017911677960981216681", "50828770098273018613954893137366601237", "227029905332151664031538809299041445898", "146694696859313837855813612844997967728", "184001240547734718021832429594969361894", "77812751738075342271363341439217604664", "250364202518561917982132868305756238723", "38023406877697203983208763964391772216"], "threshold":0.9}, "id":"ASB-A-513581389-0414aa87", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/development/+/d72b3170cb597b52eb792d81290084fe92bf1ef9", "target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"}}, {"deprecated":false, "digest":{"function_hash":"334848964155251062634198088140463209687", "length":2894}, "id":"ASB-A-513581389-48013f94", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/development/+/d72b3170cb597b52eb792d81290084fe92bf1ef9", "target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java", "function":"parsePartHeaders"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17-next:0"}, {"fixed":"17-next:2026-09-01"}]}], "versions":["17-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/7ae2a8139ff4593459d6278fc498dd6936ed9f26"], "severity":"Critical", "spl":"2026-09-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"334848964155251062634198088140463209687", "length":2894}, "id":"ASB-A-513581389-a87b1e52", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7ae2a8139ff4593459d6278fc498dd6936ed9f26", "target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java", "function":"parsePartHeaders"}}, {"deprecated":false, "digest":{"line_hashes":["142753661400032712952520225180075874283", "279718015445828485956211179825455582116", "293808198340319723335735378833586477118", "228380082209694445135472943080580415479", "146694696859313837855813612844997967728", "95153332327285614191313206450219384003", "53207138459955910017911677960981216681", "50828770098273018613954893137366601237", "227029905332151664031538809299041445898", "146694696859313837855813612844997967728", "184001240547734718021832429594969361894", "77812751738075342271363341439217604664", "250364202518561917982132868305756238723", "38023406877697203983208763964391772216"], "threshold":0.9}, "id":"ASB-A-513581389-fe4bad8d", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7ae2a8139ff4593459d6278fc498dd6936ed9f26", "target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java"}}]}}, {"package":{"name":"platform/development", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"15:0"}, {"fixed":"15:2026-09-01"}]}], "versions":["15"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/development/+/421c62127bdaa7bf5ee87205cb573f5f0fdafb52"], "severity":"Critical", "spl":"2026-09-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"139209452558366853462507679697327071354", "length":2717}, "id":"ASB-A-513581389-e02e5d2a", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/development/+/421c62127bdaa7bf5ee87205cb573f5f0fdafb52", "target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java", "function":"parsePartHeaders"}}, {"deprecated":false, "digest":{"line_hashes":["142753661400032712952520225180075874283", "279718015445828485956211179825455582116", "293808198340319723335735378833586477118", "228380082209694445135472943080580415479", "146694696859313837855813612844997967728", "95153332327285614191313206450219384003", "53207138459955910017911677960981216681", "50828770098273018613954893137366601237", "227029905332151664031538809299041445898", "146694696859313837855813612844997967728", "184001240547734718021832429594969361894", "77812751738075342271363341439217604664", "250364202518561917982132868305756238723", "38023406877697203983208763964391772216"], "threshold":0.9}, "id":"ASB-A-513581389-f2777ed2", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/development/+/421c62127bdaa7bf5ee87205cb573f5f0fdafb52", "target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"15:0"}, {"fixed":"15:2026-09-01"}]}], "versions":["15"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/5d64454996e013390452941ab0bda62eb8570690"], "severity":"Critical", "spl":"2026-09-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["142753661400032712952520225180075874283", "279718015445828485956211179825455582116", "293808198340319723335735378833586477118", "228380082209694445135472943080580415479", "146694696859313837855813612844997967728", "95153332327285614191313206450219384003", "53207138459955910017911677960981216681", "50828770098273018613954893137366601237", "227029905332151664031538809299041445898", "146694696859313837855813612844997967728", "184001240547734718021832429594969361894", "77812751738075342271363341439217604664", "250364202518561917982132868305756238723", "38023406877697203983208763964391772216"], "threshold":0.9}, "id":"ASB-A-513581389-48acb06e", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/5d64454996e013390452941ab0bda62eb8570690", "target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java"}}, {"deprecated":false, "digest":{"function_hash":"139209452558366853462507679697327071354", "length":2717}, "id":"ASB-A-513581389-ea427c14", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/5d64454996e013390452941ab0bda62eb8570690", "target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java", "function":"parsePartHeaders"}}]}}, {"package":{"name":"platform/development", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16:0"}, {"fixed":"16:2026-09-01"}]}], "versions":["16"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/development/+/d0b1aee413a6ff6b9a9afe853ba78509730233ed"], "severity":"Critical", "spl":"2026-09-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["142753661400032712952520225180075874283", "279718015445828485956211179825455582116", "293808198340319723335735378833586477118", "228380082209694445135472943080580415479", "146694696859313837855813612844997967728", "95153332327285614191313206450219384003", "53207138459955910017911677960981216681", "50828770098273018613954893137366601237", "227029905332151664031538809299041445898", "146694696859313837855813612844997967728", "184001240547734718021832429594969361894", "77812751738075342271363341439217604664", "250364202518561917982132868305756238723", "38023406877697203983208763964391772216"], "threshold":0.9}, "id":"ASB-A-513581389-2b415f40", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/development/+/d0b1aee413a6ff6b9a9afe853ba78509730233ed", "target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"}}, {"deprecated":false, "digest":{"function_hash":"139209452558366853462507679697327071354", "length":2717}, "id":"ASB-A-513581389-c7dabd73", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/development/+/d0b1aee413a6ff6b9a9afe853ba78509730233ed", "target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java", "function":"parsePartHeaders"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16:0"}, {"fixed":"16:2026-09-01"}]}], "versions":["16"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/cc7b079413126dd57cf57efeb61d3c2c1f0df08c"], "severity":"Critical", "spl":"2026-09-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["142753661400032712952520225180075874283", "279718015445828485956211179825455582116", "293808198340319723335735378833586477118", "228380082209694445135472943080580415479", "146694696859313837855813612844997967728", "95153332327285614191313206450219384003", "53207138459955910017911677960981216681", "50828770098273018613954893137366601237", "227029905332151664031538809299041445898", "146694696859313837855813612844997967728", "184001240547734718021832429594969361894", "77812751738075342271363341439217604664", "250364202518561917982132868305756238723", "38023406877697203983208763964391772216"], "threshold":0.9}, "id":"ASB-A-513581389-0ce6ac7c", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/cc7b079413126dd57cf57efeb61d3c2c1f0df08c", "target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java"}}, {"deprecated":false, "digest":{"function_hash":"139209452558366853462507679697327071354", "length":2717}, "id":"ASB-A-513581389-8c24277b", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/cc7b079413126dd57cf57efeb61d3c2c1f0df08c", "target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java", "function":"parsePartHeaders"}}]}}, {"package":{"name":"platform/development", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16-qpr2:0"}, {"fixed":"16-qpr2:2026-09-01"}]}], "versions":["16-qpr2"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/development/+/27ef7b34479280996cc51f9ee20890efe6aa1e7e"], "severity":"Critical", "spl":"2026-09-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["142753661400032712952520225180075874283", "279718015445828485956211179825455582116", "293808198340319723335735378833586477118", "228380082209694445135472943080580415479", "146694696859313837855813612844997967728", "95153332327285614191313206450219384003", "53207138459955910017911677960981216681", "50828770098273018613954893137366601237", "227029905332151664031538809299041445898", "146694696859313837855813612844997967728", "184001240547734718021832429594969361894", "77812751738075342271363341439217604664", "250364202518561917982132868305756238723", "38023406877697203983208763964391772216"], "threshold":0.9}, "id":"ASB-A-513581389-86b19cac", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/development/+/27ef7b34479280996cc51f9ee20890efe6aa1e7e", "target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"}}, {"deprecated":false, "digest":{"function_hash":"139209452558366853462507679697327071354", "length":2717}, "id":"ASB-A-513581389-e16d1f37", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/development/+/27ef7b34479280996cc51f9ee20890efe6aa1e7e", "target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java", "function":"parsePartHeaders"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16-qpr2:0"}, {"fixed":"16-qpr2:2026-09-01"}]}], "versions":["16-qpr2"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/5bff1d73a66a76d7de8beb49d8207157fdff5a71"], "severity":"Critical", "spl":"2026-09-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"139209452558366853462507679697327071354", "length":2717}, "id":"ASB-A-513581389-62db124c", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/5bff1d73a66a76d7de8beb49d8207157fdff5a71", "target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java", "function":"parsePartHeaders"}}, {"deprecated":false, "digest":{"line_hashes":["142753661400032712952520225180075874283", "279718015445828485956211179825455582116", "293808198340319723335735378833586477118", "228380082209694445135472943080580415479", "146694696859313837855813612844997967728", "95153332327285614191313206450219384003", "53207138459955910017911677960981216681", "50828770098273018613954893137366601237", "227029905332151664031538809299041445898", "146694696859313837855813612844997967728", "184001240547734718021832429594969361894", "77812751738075342271363341439217604664", "250364202518561917982132868305756238723", "38023406877697203983208763964391772216"], "threshold":0.9}, "id":"ASB-A-513581389-73af98b8", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/5bff1d73a66a76d7de8beb49d8207157fdff5a71", "target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java"}}]}}, {"package":{"name":"platform/development", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17:0"}, {"fixed":"17:2026-09-01"}]}], "versions":["17"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/development/+/6e2d69a3c5360f3f70f1ce1f8e361d176a631d8c"], "severity":"Critical", "spl":"2026-09-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"139209452558366853462507679697327071354", "length":2717}, "id":"ASB-A-513581389-3fe64e6f", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/development/+/6e2d69a3c5360f3f70f1ce1f8e361d176a631d8c", "target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java", "function":"parsePartHeaders"}}, {"deprecated":false, "digest":{"line_hashes":["142753661400032712952520225180075874283", "279718015445828485956211179825455582116", "293808198340319723335735378833586477118", "228380082209694445135472943080580415479", "146694696859313837855813612844997967728", "95153332327285614191313206450219384003", "53207138459955910017911677960981216681", "50828770098273018613954893137366601237", "227029905332151664031538809299041445898", "146694696859313837855813612844997967728", "184001240547734718021832429594969361894", "77812751738075342271363341439217604664", "250364202518561917982132868305756238723", "38023406877697203983208763964391772216"], "threshold":0.9}, "id":"ASB-A-513581389-780952e6", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/development/+/6e2d69a3c5360f3f70f1ce1f8e361d176a631d8c", "target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17:0"}, {"fixed":"17:2026-09-01"}]}], "versions":["17"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/15d5a254e10047e1bbddb6b7d1de315835190387"], "severity":"Critical", "spl":"2026-09-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["142753661400032712952520225180075874283", "279718015445828485956211179825455582116", "293808198340319723335735378833586477118", "228380082209694445135472943080580415479", "146694696859313837855813612844997967728", "95153332327285614191313206450219384003", "53207138459955910017911677960981216681", "50828770098273018613954893137366601237", "227029905332151664031538809299041445898", "146694696859313837855813612844997967728", "184001240547734718021832429594969361894", "77812751738075342271363341439217604664", "250364202518561917982132868305756238723", "38023406877697203983208763964391772216"], "threshold":0.9}, "id":"ASB-A-513581389-4f1793c7", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/15d5a254e10047e1bbddb6b7d1de315835190387", "target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java"}}, {"deprecated":false, "digest":{"function_hash":"139209452558366853462507679697327071354", "length":2717}, "id":"ASB-A-513581389-e4c01d7f", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/15d5a254e10047e1bbddb6b7d1de315835190387", "target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java", "function":"parsePartHeaders"}}]}}, {"package":{"name":"platform/development", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"14:0"}, {"fixed":"14:2026-09-01"}]}], "versions":["14"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/development/+/0528981dd39213d3a2f678f69489f667a1e4f34e"], "severity":"Critical", "spl":"2026-09-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"139209452558366853462507679697327071354", "length":2717}, "id":"ASB-A-513581389-734dfb99", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/development/+/0528981dd39213d3a2f678f69489f667a1e4f34e", "target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java", "function":"parsePartHeaders"}}, {"deprecated":false, "digest":{"line_hashes":["142753661400032712952520225180075874283", "279718015445828485956211179825455582116", "293808198340319723335735378833586477118", "228380082209694445135472943080580415479", "146694696859313837855813612844997967728", "95153332327285614191313206450219384003", "53207138459955910017911677960981216681", "50828770098273018613954893137366601237", "227029905332151664031538809299041445898", "146694696859313837855813612844997967728", "184001240547734718021832429594969361894", "77812751738075342271363341439217604664", "250364202518561917982132868305756238723", "38023406877697203983208763964391772216"], "threshold":0.9}, "id":"ASB-A-513581389-7869b5a6", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/development/+/0528981dd39213d3a2f678f69489f667a1e4f34e", "target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"14:0"}, {"fixed":"14:2026-09-01"}]}], "versions":["14"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/683ce0476b6d53e363014d91aee49f1e200a8aac"], "severity":"Critical", "spl":"2026-09-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["142753661400032712952520225180075874283", "279718015445828485956211179825455582116", "293808198340319723335735378833586477118", "228380082209694445135472943080580415479", "146694696859313837855813612844997967728", "95153332327285614191313206450219384003", "53207138459955910017911677960981216681", "50828770098273018613954893137366601237", "227029905332151664031538809299041445898", "146694696859313837855813612844997967728", "184001240547734718021832429594969361894", "77812751738075342271363341439217604664", "250364202518561917982132868305756238723", "38023406877697203983208763964391772216"], "threshold":0.9}, "id":"ASB-A-513581389-69c793a6", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/683ce0476b6d53e363014d91aee49f1e200a8aac", "target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java"}}, {"deprecated":false, "digest":{"function_hash":"139209452558366853462507679697327071354", "length":2717}, "id":"ASB-A-513581389-b92c3a9d", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/683ce0476b6d53e363014d91aee49f1e200a8aac", "target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java", "function":"parsePartHeaders"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2026-09-01"}]}