{"id":"ASB-A-517377150", "published":"2026-10-01T00:00:00Z", "modified":"2026-10-05T16:20:22.411518700Z", "aliases":["CVE-2026-55265", "A-517377150"], "details":"In multiple functions of PduParser.java, there is a possible out of bounds read due to a missing bounds check. This could lead to a remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/development", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17-next:0"}, {"fixed":"17-next:2026-10-01"}]}], "versions":["17-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/development/+/8301b51be3c64341fa65fa9434c997fa3d5dbe8e"], "severity":"Critical", "spl":"2026-10-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["115235806051313244474866949100208703067", "39908776073765054527518864029502213196", "275653553295305798105931955962627302090", "315789821278986359943961842114991851786", "273584783892463185486660509835404875994", "316914648920727318797279992064374633436", "285739975939188764889955886281720911186", "202883830019296998404307437662182241630", "193332972597265551523458097873810045930", "278291187962647285066997893112381908747", "2526927424068458653309312163334227701", "93479104484888627398786694091720715034", "212873390594843345403940431899395745769", "288962015757965491310945920864062992047", "37198973334187233653163172669674111813", "141985895648357635255710093566769079978", "133830731022674405831429499635994190490", "177424558011605743484214171609036785073", "308414417480901704148964930964916506416", "290580744057020254864945879392239677470", "66780706580694202590644247798608418592", "303980660904542103297090327648050666155"], "threshold":0.9}, "id":"ASB-A-517377150-2cd27a16", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/development/+/8301b51be3c64341fa65fa9434c997fa3d5dbe8e", "target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"}}, {"deprecated":false, "digest":{"function_hash":"307988262085666920161556929475077940110", "length":221}, "id":"ASB-A-517377150-ac86bb25", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/development/+/8301b51be3c64341fa65fa9434c997fa3d5dbe8e", "target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java", "function":"skipWapValue"}}, {"deprecated":false, "digest":{"function_hash":"139209452558366853462507679697327071354", "length":2717}, "id":"ASB-A-517377150-d433e5bb", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/development/+/8301b51be3c64341fa65fa9434c997fa3d5dbe8e", "target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java", "function":"parsePartHeaders"}}, {"deprecated":false, "digest":{"function_hash":"81903043649705649230325623504859643202", "length":1968}, "id":"ASB-A-517377150-e8f998ab", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/development/+/8301b51be3c64341fa65fa9434c997fa3d5dbe8e", "target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java", "function":"parseParts"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17-next:0"}, {"fixed":"17-next:2026-10-01"}]}], "versions":["17-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/9862993afa7b85ef27146b0773e42794f520c5fc"], "severity":"Critical", "spl":"2026-10-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"81903043649705649230325623504859643202", "length":1968}, "id":"ASB-A-517377150-3102709a", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/9862993afa7b85ef27146b0773e42794f520c5fc", "target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java", "function":"parseParts"}}, {"deprecated":false, "digest":{"line_hashes":["115235806051313244474866949100208703067", "39908776073765054527518864029502213196", "275653553295305798105931955962627302090", "315789821278986359943961842114991851786", "273584783892463185486660509835404875994", "189292235848414805027084279346301616595", "7056861983714822828378052983803339987", "200439674306176014353275823594484613726", "193332972597265551523458097873810045930", "278291187962647285066997893112381908747", "2526927424068458653309312163334227701", "93479104484888627398786694091720715034", "212873390594843345403940431899395745769", "288962015757965491310945920864062992047", "37198973334187233653163172669674111813", "141985895648357635255710093566769079978", "133830731022674405831429499635994190490", "177424558011605743484214171609036785073", "308414417480901704148964930964916506416", "290580744057020254864945879392239677470", "66780706580694202590644247798608418592", "303980660904542103297090327648050666155"], "threshold":0.9}, "id":"ASB-A-517377150-7859222b", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/9862993afa7b85ef27146b0773e42794f520c5fc", "target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java"}}, {"deprecated":false, "digest":{"function_hash":"139209452558366853462507679697327071354", "length":2717}, "id":"ASB-A-517377150-e94f05dd", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/9862993afa7b85ef27146b0773e42794f520c5fc", "target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java", "function":"parsePartHeaders"}}, {"deprecated":false, "digest":{"function_hash":"307988262085666920161556929475077940110", "length":221}, "id":"ASB-A-517377150-f1cc0223", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/9862993afa7b85ef27146b0773e42794f520c5fc", "target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java", "function":"skipWapValue"}}]}}, {"package":{"name":"platform/development", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"15:0"}, {"fixed":"15:2026-10-01"}]}], "versions":["15"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/development/+/2ca82d76396303c29881d7fa549d94bc6f274a33"], "severity":"Critical", "spl":"2026-10-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"81903043649705649230325623504859643202", "length":1968}, "id":"ASB-A-517377150-215ce1ec", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/development/+/2ca82d76396303c29881d7fa549d94bc6f274a33", "target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java", "function":"parseParts"}}, {"deprecated":false, "digest":{"line_hashes":["115235806051313244474866949100208703067", "39908776073765054527518864029502213196", "275653553295305798105931955962627302090", "315789821278986359943961842114991851786", "273584783892463185486660509835404875994", "316914648920727318797279992064374633436", "285739975939188764889955886281720911186", "202883830019296998404307437662182241630", "193332972597265551523458097873810045930", "278291187962647285066997893112381908747", "2526927424068458653309312163334227701", "93479104484888627398786694091720715034", "212873390594843345403940431899395745769", "288962015757965491310945920864062992047", "37198973334187233653163172669674111813", "141985895648357635255710093566769079978", "133830731022674405831429499635994190490", "177424558011605743484214171609036785073", "308414417480901704148964930964916506416", "290580744057020254864945879392239677470", "66780706580694202590644247798608418592", "303980660904542103297090327648050666155"], "threshold":0.9}, "id":"ASB-A-517377150-76593d71", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/development/+/2ca82d76396303c29881d7fa549d94bc6f274a33", "target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"}}, {"deprecated":false, "digest":{"function_hash":"307988262085666920161556929475077940110", "length":221}, "id":"ASB-A-517377150-76c3c3e8", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/development/+/2ca82d76396303c29881d7fa549d94bc6f274a33", "target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java", "function":"skipWapValue"}}, {"deprecated":false, "digest":{"function_hash":"139209452558366853462507679697327071354", "length":2717}, "id":"ASB-A-517377150-cf2ba76b", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/development/+/2ca82d76396303c29881d7fa549d94bc6f274a33", "target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java", "function":"parsePartHeaders"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"15:0"}, {"fixed":"15:2026-10-01"}]}], "versions":["15"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/4a5fa93a13b6ebfccac598381fa4a4881004bfc9"], "severity":"Critical", "spl":"2026-10-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"307988262085666920161556929475077940110", "length":221}, "id":"ASB-A-517377150-0278d654", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/4a5fa93a13b6ebfccac598381fa4a4881004bfc9", "target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java", "function":"skipWapValue"}}, {"deprecated":false, "digest":{"line_hashes":["115235806051313244474866949100208703067", "39908776073765054527518864029502213196", "275653553295305798105931955962627302090", "315789821278986359943961842114991851786", "273584783892463185486660509835404875994", "189292235848414805027084279346301616595", "7056861983714822828378052983803339987", "200439674306176014353275823594484613726", "193332972597265551523458097873810045930", "278291187962647285066997893112381908747", "2526927424068458653309312163334227701", "93479104484888627398786694091720715034", "212873390594843345403940431899395745769", "288962015757965491310945920864062992047", "37198973334187233653163172669674111813", "141985895648357635255710093566769079978", "133830731022674405831429499635994190490", "177424558011605743484214171609036785073", "308414417480901704148964930964916506416", "290580744057020254864945879392239677470", "66780706580694202590644247798608418592", "303980660904542103297090327648050666155"], "threshold":0.9}, "id":"ASB-A-517377150-40d2adc3", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/4a5fa93a13b6ebfccac598381fa4a4881004bfc9", "target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java"}}, {"deprecated":false, "digest":{"function_hash":"139209452558366853462507679697327071354", "length":2717}, "id":"ASB-A-517377150-f270e250", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/4a5fa93a13b6ebfccac598381fa4a4881004bfc9", "target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java", "function":"parsePartHeaders"}}, {"deprecated":false, "digest":{"function_hash":"81903043649705649230325623504859643202", "length":1968}, "id":"ASB-A-517377150-ff4dc3c6", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/4a5fa93a13b6ebfccac598381fa4a4881004bfc9", "target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java", "function":"parseParts"}}]}}, {"package":{"name":"platform/development", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16:0"}, {"fixed":"16:2026-10-01"}]}], "versions":["16"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/development/+/ceb926c9d643398f2404c31a2f6e00a3609f0092"], "severity":"Critical", "spl":"2026-10-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"139209452558366853462507679697327071354", "length":2717}, "id":"ASB-A-517377150-3f7d37be", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/development/+/ceb926c9d643398f2404c31a2f6e00a3609f0092", "target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java", "function":"parsePartHeaders"}}, {"deprecated":false, "digest":{"function_hash":"307988262085666920161556929475077940110", "length":221}, "id":"ASB-A-517377150-5f1e94b1", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/development/+/ceb926c9d643398f2404c31a2f6e00a3609f0092", "target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java", "function":"skipWapValue"}}, {"deprecated":false, "digest":{"function_hash":"81903043649705649230325623504859643202", "length":1968}, "id":"ASB-A-517377150-9fb6f350", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/development/+/ceb926c9d643398f2404c31a2f6e00a3609f0092", "target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java", "function":"parseParts"}}, {"deprecated":false, "digest":{"line_hashes":["115235806051313244474866949100208703067", "39908776073765054527518864029502213196", "275653553295305798105931955962627302090", "315789821278986359943961842114991851786", "273584783892463185486660509835404875994", "316914648920727318797279992064374633436", "285739975939188764889955886281720911186", "202883830019296998404307437662182241630", "193332972597265551523458097873810045930", "278291187962647285066997893112381908747", "2526927424068458653309312163334227701", "93479104484888627398786694091720715034", "212873390594843345403940431899395745769", "288962015757965491310945920864062992047", "37198973334187233653163172669674111813", "141985895648357635255710093566769079978", "133830731022674405831429499635994190490", "177424558011605743484214171609036785073", "308414417480901704148964930964916506416", "290580744057020254864945879392239677470", "66780706580694202590644247798608418592", "303980660904542103297090327648050666155"], "threshold":0.9}, "id":"ASB-A-517377150-daea88a8", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/development/+/ceb926c9d643398f2404c31a2f6e00a3609f0092", "target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16:0"}, {"fixed":"16:2026-10-01"}]}], "versions":["16"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/80e133b07803b4d29c002f4df1e1fded4903a34f"], "severity":"Critical", "spl":"2026-10-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"139209452558366853462507679697327071354", "length":2717}, "id":"ASB-A-517377150-081705ac", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/80e133b07803b4d29c002f4df1e1fded4903a34f", "target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java", "function":"parsePartHeaders"}}, {"deprecated":false, "digest":{"line_hashes":["115235806051313244474866949100208703067", "39908776073765054527518864029502213196", "275653553295305798105931955962627302090", "315789821278986359943961842114991851786", "273584783892463185486660509835404875994", "189292235848414805027084279346301616595", "7056861983714822828378052983803339987", "200439674306176014353275823594484613726", "193332972597265551523458097873810045930", "278291187962647285066997893112381908747", "2526927424068458653309312163334227701", "93479104484888627398786694091720715034", "212873390594843345403940431899395745769", "288962015757965491310945920864062992047", "37198973334187233653163172669674111813", "141985895648357635255710093566769079978", "133830731022674405831429499635994190490", "177424558011605743484214171609036785073", "308414417480901704148964930964916506416", "290580744057020254864945879392239677470", "66780706580694202590644247798608418592", "303980660904542103297090327648050666155"], "threshold":0.9}, "id":"ASB-A-517377150-16061ade", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/80e133b07803b4d29c002f4df1e1fded4903a34f", "target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java"}}, {"deprecated":false, "digest":{"function_hash":"81903043649705649230325623504859643202", "length":1968}, "id":"ASB-A-517377150-4f3ecf7e", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/80e133b07803b4d29c002f4df1e1fded4903a34f", "target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java", "function":"parseParts"}}, {"deprecated":false, "digest":{"function_hash":"307988262085666920161556929475077940110", "length":221}, "id":"ASB-A-517377150-7d977d67", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/80e133b07803b4d29c002f4df1e1fded4903a34f", "target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java", "function":"skipWapValue"}}]}}, {"package":{"name":"platform/development", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16-qpr2:0"}, {"fixed":"16-qpr2:2026-10-01"}]}], "versions":["16-qpr2"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/development/+/ea2e128e53133b400c794288ece2810323385bdc"], "severity":"Critical", "spl":"2026-10-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["115235806051313244474866949100208703067", "39908776073765054527518864029502213196", "275653553295305798105931955962627302090", "315789821278986359943961842114991851786", "273584783892463185486660509835404875994", "316914648920727318797279992064374633436", "285739975939188764889955886281720911186", "202883830019296998404307437662182241630", "193332972597265551523458097873810045930", "278291187962647285066997893112381908747", "2526927424068458653309312163334227701", "93479104484888627398786694091720715034", "212873390594843345403940431899395745769", "288962015757965491310945920864062992047", "37198973334187233653163172669674111813", "141985895648357635255710093566769079978", "133830731022674405831429499635994190490", "177424558011605743484214171609036785073", "308414417480901704148964930964916506416", "290580744057020254864945879392239677470", "66780706580694202590644247798608418592", "303980660904542103297090327648050666155"], "threshold":0.9}, "id":"ASB-A-517377150-262adf6d", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/development/+/ea2e128e53133b400c794288ece2810323385bdc", "target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"}}, {"deprecated":false, "digest":{"function_hash":"307988262085666920161556929475077940110", "length":221}, "id":"ASB-A-517377150-5017e467", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/development/+/ea2e128e53133b400c794288ece2810323385bdc", "target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java", "function":"skipWapValue"}}, {"deprecated":false, "digest":{"function_hash":"81903043649705649230325623504859643202", "length":1968}, "id":"ASB-A-517377150-aa5a6a93", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/development/+/ea2e128e53133b400c794288ece2810323385bdc", "target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java", "function":"parseParts"}}, {"deprecated":false, "digest":{"function_hash":"139209452558366853462507679697327071354", "length":2717}, "id":"ASB-A-517377150-d4ab1367", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/development/+/ea2e128e53133b400c794288ece2810323385bdc", "target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java", "function":"parsePartHeaders"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16-qpr2:0"}, {"fixed":"16-qpr2:2026-10-01"}]}], "versions":["16-qpr2"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/8911eb570386f025578ad7d55b8a18e967ea4e51"], "severity":"Critical", "spl":"2026-10-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"81903043649705649230325623504859643202", "length":1968}, "id":"ASB-A-517377150-2add7a24", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/8911eb570386f025578ad7d55b8a18e967ea4e51", "target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java", "function":"parseParts"}}, {"deprecated":false, "digest":{"line_hashes":["115235806051313244474866949100208703067", "39908776073765054527518864029502213196", "275653553295305798105931955962627302090", "315789821278986359943961842114991851786", "273584783892463185486660509835404875994", "189292235848414805027084279346301616595", "7056861983714822828378052983803339987", "200439674306176014353275823594484613726", "193332972597265551523458097873810045930", "278291187962647285066997893112381908747", "2526927424068458653309312163334227701", "93479104484888627398786694091720715034", "212873390594843345403940431899395745769", "288962015757965491310945920864062992047", "37198973334187233653163172669674111813", "141985895648357635255710093566769079978", "133830731022674405831429499635994190490", "177424558011605743484214171609036785073", "308414417480901704148964930964916506416", "290580744057020254864945879392239677470", "66780706580694202590644247798608418592", "303980660904542103297090327648050666155"], "threshold":0.9}, "id":"ASB-A-517377150-b62633b4", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/8911eb570386f025578ad7d55b8a18e967ea4e51", "target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java"}}, {"deprecated":false, "digest":{"function_hash":"307988262085666920161556929475077940110", "length":221}, "id":"ASB-A-517377150-c04fa2d3", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/8911eb570386f025578ad7d55b8a18e967ea4e51", "target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java", "function":"skipWapValue"}}, {"deprecated":false, "digest":{"function_hash":"139209452558366853462507679697327071354", "length":2717}, "id":"ASB-A-517377150-de333493", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/8911eb570386f025578ad7d55b8a18e967ea4e51", "target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java", "function":"parsePartHeaders"}}]}}, {"package":{"name":"platform/development", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17:0"}, {"fixed":"17:2026-10-01"}]}], "versions":["17"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/development/+/ec7971faed3ab17006208e441e87d30c20dceee4"], "severity":"Critical", "spl":"2026-10-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["115235806051313244474866949100208703067", "39908776073765054527518864029502213196", "275653553295305798105931955962627302090", "315789821278986359943961842114991851786", "273584783892463185486660509835404875994", "316914648920727318797279992064374633436", "285739975939188764889955886281720911186", "202883830019296998404307437662182241630", "193332972597265551523458097873810045930", "278291187962647285066997893112381908747", "2526927424068458653309312163334227701", "93479104484888627398786694091720715034", "212873390594843345403940431899395745769", "288962015757965491310945920864062992047", "37198973334187233653163172669674111813", "141985895648357635255710093566769079978", "133830731022674405831429499635994190490", "177424558011605743484214171609036785073", "308414417480901704148964930964916506416", "290580744057020254864945879392239677470", "66780706580694202590644247798608418592", "303980660904542103297090327648050666155"], "threshold":0.9}, "id":"ASB-A-517377150-6d7cbf6d", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/development/+/ec7971faed3ab17006208e441e87d30c20dceee4", "target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"}}, {"deprecated":false, "digest":{"function_hash":"81903043649705649230325623504859643202", "length":1968}, "id":"ASB-A-517377150-762a47ae", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/development/+/ec7971faed3ab17006208e441e87d30c20dceee4", "target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java", "function":"parseParts"}}, {"deprecated":false, "digest":{"function_hash":"139209452558366853462507679697327071354", "length":2717}, "id":"ASB-A-517377150-d579e08b", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/development/+/ec7971faed3ab17006208e441e87d30c20dceee4", "target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java", "function":"parsePartHeaders"}}, {"deprecated":false, "digest":{"function_hash":"307988262085666920161556929475077940110", "length":221}, "id":"ASB-A-517377150-def50b9b", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/development/+/ec7971faed3ab17006208e441e87d30c20dceee4", "target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java", "function":"skipWapValue"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17:0"}, {"fixed":"17:2026-10-01"}]}], "versions":["17"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/d982689e732a90cb31fb40bb409affd1f0aef49a"], "severity":"Critical", "spl":"2026-10-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"81903043649705649230325623504859643202", "length":1968}, "id":"ASB-A-517377150-1aca3d8e", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/d982689e732a90cb31fb40bb409affd1f0aef49a", "target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java", "function":"parseParts"}}, {"deprecated":false, "digest":{"function_hash":"139209452558366853462507679697327071354", "length":2717}, "id":"ASB-A-517377150-2a59c047", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/d982689e732a90cb31fb40bb409affd1f0aef49a", "target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java", "function":"parsePartHeaders"}}, {"deprecated":false, "digest":{"function_hash":"307988262085666920161556929475077940110", "length":221}, "id":"ASB-A-517377150-4486b8da", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/d982689e732a90cb31fb40bb409affd1f0aef49a", "target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java", "function":"skipWapValue"}}, {"deprecated":false, "digest":{"line_hashes":["115235806051313244474866949100208703067", "39908776073765054527518864029502213196", "275653553295305798105931955962627302090", "315789821278986359943961842114991851786", "273584783892463185486660509835404875994", "189292235848414805027084279346301616595", "7056861983714822828378052983803339987", "200439674306176014353275823594484613726", "193332972597265551523458097873810045930", "278291187962647285066997893112381908747", "2526927424068458653309312163334227701", "93479104484888627398786694091720715034", "212873390594843345403940431899395745769", "288962015757965491310945920864062992047", "37198973334187233653163172669674111813", "141985895648357635255710093566769079978", "133830731022674405831429499635994190490", "177424558011605743484214171609036785073", "308414417480901704148964930964916506416", "290580744057020254864945879392239677470", "66780706580694202590644247798608418592", "303980660904542103297090327648050666155"], "threshold":0.9}, "id":"ASB-A-517377150-692dc441", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/d982689e732a90cb31fb40bb409affd1f0aef49a", "target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java"}}]}}, {"package":{"name":"platform/development", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"14:0"}, {"fixed":"14:2026-10-01"}]}], "versions":["14"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/development/+/dcde542288db4fcb56393b826219ab0a9f9734a9"], "severity":"Critical", "spl":"2026-10-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["115235806051313244474866949100208703067", "39908776073765054527518864029502213196", "275653553295305798105931955962627302090", "315789821278986359943961842114991851786", "273584783892463185486660509835404875994", "316914648920727318797279992064374633436", "285739975939188764889955886281720911186", "202883830019296998404307437662182241630", "193332972597265551523458097873810045930", "278291187962647285066997893112381908747", "2526927424068458653309312163334227701", "93479104484888627398786694091720715034", "212873390594843345403940431899395745769", "288962015757965491310945920864062992047", "37198973334187233653163172669674111813", "141985895648357635255710093566769079978", "133830731022674405831429499635994190490", "177424558011605743484214171609036785073", "308414417480901704148964930964916506416", "290580744057020254864945879392239677470", "66780706580694202590644247798608418592", "303980660904542103297090327648050666155"], "threshold":0.9}, "id":"ASB-A-517377150-2f536dcf", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/development/+/dcde542288db4fcb56393b826219ab0a9f9734a9", "target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"}}, {"deprecated":false, "digest":{"function_hash":"307988262085666920161556929475077940110", "length":221}, "id":"ASB-A-517377150-573ada8c", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/development/+/dcde542288db4fcb56393b826219ab0a9f9734a9", "target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java", "function":"skipWapValue"}}, {"deprecated":false, "digest":{"function_hash":"139209452558366853462507679697327071354", "length":2717}, "id":"ASB-A-517377150-a4b75880", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/development/+/dcde542288db4fcb56393b826219ab0a9f9734a9", "target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java", "function":"parsePartHeaders"}}, {"deprecated":false, "digest":{"function_hash":"81903043649705649230325623504859643202", "length":1968}, "id":"ASB-A-517377150-e1f167ec", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/development/+/dcde542288db4fcb56393b826219ab0a9f9734a9", "target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java", "function":"parseParts"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"14:0"}, {"fixed":"14:2026-10-01"}]}], "versions":["14"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/7961eb20412113c0df7d69b2e843bfe0c0471244"], "severity":"Critical", "spl":"2026-10-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"139209452558366853462507679697327071354", "length":2717}, "id":"ASB-A-517377150-7b2c0d14", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7961eb20412113c0df7d69b2e843bfe0c0471244", "target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java", "function":"parsePartHeaders"}}, {"deprecated":false, "digest":{"function_hash":"307988262085666920161556929475077940110", "length":221}, "id":"ASB-A-517377150-80081593", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7961eb20412113c0df7d69b2e843bfe0c0471244", "target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java", "function":"skipWapValue"}}, {"deprecated":false, "digest":{"line_hashes":["115235806051313244474866949100208703067", "39908776073765054527518864029502213196", "275653553295305798105931955962627302090", "315789821278986359943961842114991851786", "273584783892463185486660509835404875994", "189292235848414805027084279346301616595", "7056861983714822828378052983803339987", "200439674306176014353275823594484613726", "193332972597265551523458097873810045930", "278291187962647285066997893112381908747", "2526927424068458653309312163334227701", "93479104484888627398786694091720715034", "212873390594843345403940431899395745769", "288962015757965491310945920864062992047", "37198973334187233653163172669674111813", "141985895648357635255710093566769079978", "133830731022674405831429499635994190490", "177424558011605743484214171609036785073", "308414417480901704148964930964916506416", "290580744057020254864945879392239677470", "66780706580694202590644247798608418592", "303980660904542103297090327648050666155"], "threshold":0.9}, "id":"ASB-A-517377150-8c46a561", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7961eb20412113c0df7d69b2e843bfe0c0471244", "target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java"}}, {"deprecated":false, "digest":{"function_hash":"81903043649705649230325623504859643202", "length":1968}, "id":"ASB-A-517377150-b3b18b57", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7961eb20412113c0df7d69b2e843bfe0c0471244", "target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java", "function":"parseParts"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2026-10-01"}]}