{"id":"ASB-A-517378147", "published":"2026-11-01T00:00:00Z", "modified":"2026-11-05T16:32:28.703711716Z", "aliases":["CVE-2026-58814", "A-517378147"], "details":"In parseContentType of PduParser.java, there is a possible denial of service due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/development", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17-qpr2-next:0"}, {"fixed":"17-qpr2-next:2026-11-01"}]}], "versions":["17-qpr2-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/development/+/96b449ebd537f20338faf8ee919fcf05acc55dda"], "severity":"Critical", "spl":"2026-11-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"212162466717132089363479495165614142073", "length":1385}, "id":"ASB-A-517378147-7747d3b1", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/development/+/96b449ebd537f20338faf8ee919fcf05acc55dda", "target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java", "function":"parseContentType"}}, {"deprecated":false, "digest":{"line_hashes":["121854140715205234673495553654458523330", "136409478165362966666182304695714260102", "50075114396528856346053782771114903730", "274524318765224122466007910025242301110"], "threshold":0.9}, "id":"ASB-A-517378147-c0e0f508", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/development/+/96b449ebd537f20338faf8ee919fcf05acc55dda", "target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17-qpr2-next:0"}, {"fixed":"17-qpr2-next:2026-11-01"}]}], "versions":["17-qpr2-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/dae26ce26b3388777225d91e931328b38f487286"], "severity":"Critical", "spl":"2026-11-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["138585907356049197651595769872137111095", "75177937820477983286183616850905417630", "201802036799063034230217332538066756020", "93299189663075145488265851673479696756"], "threshold":0.9}, "id":"ASB-A-517378147-378034a4", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/dae26ce26b3388777225d91e931328b38f487286", "target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java"}}, {"deprecated":false, "digest":{"function_hash":"128172258089473237359508295994700672622", "length":1581}, "id":"ASB-A-517378147-aadb7bb6", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/dae26ce26b3388777225d91e931328b38f487286", "target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java", "function":"parseContentType"}}]}}, {"package":{"name":"platform/development", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"15:0"}, {"fixed":"15:2026-11-01"}]}], "versions":["15"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/development/+/cca4fb311881b2da3f767380e1a9be6ade7b58c6"], "severity":"Critical", "spl":"2026-11-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["121854140715205234673495553654458523330", "136409478165362966666182304695714260102", "50075114396528856346053782771114903730", "274524318765224122466007910025242301110"], "threshold":0.9}, "id":"ASB-A-517378147-2a76a75e", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/development/+/cca4fb311881b2da3f767380e1a9be6ade7b58c6", "target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"}}, {"deprecated":false, "digest":{"function_hash":"212162466717132089363479495165614142073", "length":1385}, "id":"ASB-A-517378147-f80401c6", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/development/+/cca4fb311881b2da3f767380e1a9be6ade7b58c6", "target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java", "function":"parseContentType"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"15:0"}, {"fixed":"15:2026-11-01"}]}], "versions":["15"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/fdd87941eefb4029c0d4675080dbb3a4584903c1"], "severity":"Critical", "spl":"2026-11-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"61383290368940746329447847865964857475", "length":1726}, "id":"ASB-A-517378147-390e6ab9", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/fdd87941eefb4029c0d4675080dbb3a4584903c1", "target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java", "function":"parseContentType"}}, {"deprecated":false, "digest":{"line_hashes":["138585907356049197651595769872137111095", "75177937820477983286183616850905417630", "201802036799063034230217332538066756020", "93299189663075145488265851673479696756"], "threshold":0.9}, "id":"ASB-A-517378147-85b4d9f6", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/fdd87941eefb4029c0d4675080dbb3a4584903c1", "target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java"}}]}}, {"package":{"name":"platform/development", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16:0"}, {"fixed":"16:2026-11-01"}]}], "versions":["16"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/development/+/e1dcb41c9e64d44d0b96d945825bfd508d502f53"], "severity":"Critical", "spl":"2026-11-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"212162466717132089363479495165614142073", "length":1385}, "id":"ASB-A-517378147-9855491b", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/development/+/e1dcb41c9e64d44d0b96d945825bfd508d502f53", "target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java", "function":"parseContentType"}}, {"deprecated":false, "digest":{"line_hashes":["121854140715205234673495553654458523330", "136409478165362966666182304695714260102", "50075114396528856346053782771114903730", "274524318765224122466007910025242301110"], "threshold":0.9}, "id":"ASB-A-517378147-b8d9d979", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/development/+/e1dcb41c9e64d44d0b96d945825bfd508d502f53", "target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16:0"}, {"fixed":"16:2026-11-01"}]}], "versions":["16"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/f9abde7684ce9a94b377f5b1a046af3b099f80e4"], "severity":"Critical", "spl":"2026-11-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["138585907356049197651595769872137111095", "75177937820477983286183616850905417630", "201802036799063034230217332538066756020", "93299189663075145488265851673479696756"], "threshold":0.9}, "id":"ASB-A-517378147-142b5da3", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/f9abde7684ce9a94b377f5b1a046af3b099f80e4", "target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java"}}, {"deprecated":false, "digest":{"function_hash":"61383290368940746329447847865964857475", "length":1726}, "id":"ASB-A-517378147-903d55c3", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/f9abde7684ce9a94b377f5b1a046af3b099f80e4", "target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java", "function":"parseContentType"}}]}}, {"package":{"name":"platform/development", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16-qpr2:0"}, {"fixed":"16-qpr2:2026-11-01"}]}], "versions":["16-qpr2"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/development/+/e58fa1093d402274dcf5b8109181e8563e73caa4"], "severity":"Critical", "spl":"2026-11-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"212162466717132089363479495165614142073", "length":1385}, "id":"ASB-A-517378147-beefee79", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/development/+/e58fa1093d402274dcf5b8109181e8563e73caa4", "target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java", "function":"parseContentType"}}, {"deprecated":false, "digest":{"line_hashes":["121854140715205234673495553654458523330", "136409478165362966666182304695714260102", "50075114396528856346053782771114903730", "274524318765224122466007910025242301110"], "threshold":0.9}, "id":"ASB-A-517378147-ebf09923", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/development/+/e58fa1093d402274dcf5b8109181e8563e73caa4", "target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16-qpr2:0"}, {"fixed":"16-qpr2:2026-11-01"}]}], "versions":["16-qpr2"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/962cdfc819c4b52af71d69f718292a2323b9ba8a"], "severity":"Critical", "spl":"2026-11-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"61383290368940746329447847865964857475", "length":1726}, "id":"ASB-A-517378147-5fa366c6", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/962cdfc819c4b52af71d69f718292a2323b9ba8a", "target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java", "function":"parseContentType"}}, {"deprecated":false, "digest":{"line_hashes":["138585907356049197651595769872137111095", "75177937820477983286183616850905417630", "201802036799063034230217332538066756020", "93299189663075145488265851673479696756"], "threshold":0.9}, "id":"ASB-A-517378147-b6df8c2d", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/962cdfc819c4b52af71d69f718292a2323b9ba8a", "target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java"}}]}}, {"package":{"name":"platform/development", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17:0"}, {"fixed":"17:2026-11-01"}]}], "versions":["17"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/development/+/a06134dbbf732f441d187f3722a2f6d9b8df7aae"], "severity":"Critical", "spl":"2026-11-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"212162466717132089363479495165614142073", "length":1385}, "id":"ASB-A-517378147-05035c0b", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/development/+/a06134dbbf732f441d187f3722a2f6d9b8df7aae", "target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java", "function":"parseContentType"}}, {"deprecated":false, "digest":{"line_hashes":["121854140715205234673495553654458523330", "136409478165362966666182304695714260102", "50075114396528856346053782771114903730", "274524318765224122466007910025242301110"], "threshold":0.9}, "id":"ASB-A-517378147-ed543828", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/development/+/a06134dbbf732f441d187f3722a2f6d9b8df7aae", "target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17:0"}, {"fixed":"17:2026-11-01"}]}], "versions":["17"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/e59262abddec59b022a647419d16d88fe4884f2c"], "severity":"Critical", "spl":"2026-11-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["138585907356049197651595769872137111095", "75177937820477983286183616850905417630", "201802036799063034230217332538066756020", "93299189663075145488265851673479696756"], "threshold":0.9}, "id":"ASB-A-517378147-34ac9fa6", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/e59262abddec59b022a647419d16d88fe4884f2c", "target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java"}}, {"deprecated":false, "digest":{"function_hash":"61383290368940746329447847865964857475", "length":1726}, "id":"ASB-A-517378147-3868acf1", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/e59262abddec59b022a647419d16d88fe4884f2c", "target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java", "function":"parseContentType"}}]}}, {"package":{"name":"platform/development", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"14:0"}, {"fixed":"14:2026-11-01"}]}], "versions":["14"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/development/+/8ce355dfc3f822962189bc791f1550470e6b6f1c"], "severity":"Critical", "spl":"2026-11-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"212162466717132089363479495165614142073", "length":1385}, "id":"ASB-A-517378147-392d5290", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/development/+/8ce355dfc3f822962189bc791f1550470e6b6f1c", "target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java", "function":"parseContentType"}}, {"deprecated":false, "digest":{"line_hashes":["121854140715205234673495553654458523330", "136409478165362966666182304695714260102", "50075114396528856346053782771114903730", "274524318765224122466007910025242301110"], "threshold":0.9}, "id":"ASB-A-517378147-662713d8", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/development/+/8ce355dfc3f822962189bc791f1550470e6b6f1c", "target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"14:0"}, {"fixed":"14:2026-11-01"}]}], "versions":["14"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/c05472df949332cfee558b2da01c2076b62789f5"], "severity":"Critical", "spl":"2026-11-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["138585907356049197651595769872137111095", "75177937820477983286183616850905417630", "201802036799063034230217332538066756020", "93299189663075145488265851673479696756"], "threshold":0.9}, "id":"ASB-A-517378147-9034a1f4", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/c05472df949332cfee558b2da01c2076b62789f5", "target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java"}}, {"deprecated":false, "digest":{"function_hash":"128172258089473237359508295994700672622", "length":1581}, "id":"ASB-A-517378147-9d762292", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/c05472df949332cfee558b2da01c2076b62789f5", "target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java", "function":"parseContentType"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2026-11-01"}]}