{"id":"ASB-A-303227969","details":"In allowPackageAccess of multiple files, resource exhaustion is possible when repeatedly adding allowed packages. This could lead to a local persistent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-303227969","CVE-2025-26463"],"modified":"2026-03-11T06:29:39.846351Z","published":"2025-06-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2025-06-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/4b630be2e2b30ff3c57128c660bfef6514193d25"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-next:0"},{"fixed":"16-next:2025-06-01"}]}],"versions":["16-next"],"ecosystem_specific":{"fixes":["https://googleplex-android.googlesource.com/platform/frameworks/base/+/aaa1cb20b89f3389f9fbc362a397770c8052e7fb"],"vanir_signatures":[{"target":{"file":"apex/blobstore/service/java/com/android/server/blob/BlobStoreSession.java"},"id":"ASB-A-303227969-4c9da041","deprecated":false,"digest":{"threshold":0.9,"line_hashes":["101138393458861100048541495691845930810","126491840937780628697410403373514744131","258008528360797433471288325304487224116","28783475577963723089655229407501253500","11803760918395638239289081343448805437","272350059164555836817037866321220327227"]},"signature_version":"v1","signature_type":"Line","source":"https://googleplex-android.googlesource.com/platform/frameworks/base/+/aaa1cb20b89f3389f9fbc362a397770c8052e7fb"},{"target":{"file":"apex/blobstore/framework/java/android/app/blob/BlobStoreManager.java"},"id":"ASB-A-303227969-82315d13","deprecated":false,"digest":{"threshold":0.9,"line_hashes":["37402569406643562322314055412458750040","3005921560461445780243703699796863845","87636568802040399672645385484965157980","73490189280143943928878129018643309051","23360089263224615556521682113737045181","42998921169238507580766210385903023673","257869726945214116607809097943509203135","313877664070915578054626057193338148194","74788398263807374059790075925970845467","169316865874818736176730999644787443203","172099645355247615168091416713322542175","8316593249702131755371373281488748518","274311528236342019563972291867543170720","157282420949475499776412570768254423344"]},"signature_version":"v1","signature_type":"Line","source":"https://googleplex-android.googlesource.com/platform/frameworks/base/+/aaa1cb20b89f3389f9fbc362a397770c8052e7fb"},{"target":{"function":"allowPackageAccess","file":"apex/blobstore/framework/java/android/app/blob/BlobStoreManager.java"},"id":"ASB-A-303227969-969d3a95","deprecated":false,"digest":{"length":315,"function_hash":"281638815089719090853918643520913630402"},"signature_version":"v1","signature_type":"Function","source":"https://googleplex-android.googlesource.com/platform/frameworks/base/+/aaa1cb20b89f3389f9fbc362a397770c8052e7fb"},{"target":{"function":"allowPackageAccess","file":"apex/blobstore/service/java/com/android/server/blob/BlobStoreSession.java"},"id":"ASB-A-303227969-e5210dfe","deprecated":false,"digest":{"length":540,"function_hash":"241942173066533732740582469164623051520"},"signature_version":"v1","signature_type":"Function","source":"https://googleplex-android.googlesource.com/platform/frameworks/base/+/aaa1cb20b89f3389f9fbc362a397770c8052e7fb"}],"spl":"2025-06-01","types":["DoS"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv-test/ASB-A-303227969.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2025-06-01"}]}],"versions":["15"],"ecosystem_specific":{"fixes":["https://googleplex-android.googlesource.com/platform/frameworks/base/+/509d619b2f9a52c5f3a88dbaa85b9bc7f66deaea"],"vanir_signatures":[{"target":{"file":"apex/blobstore/service/java/com/android/server/blob/BlobStoreSession.java"},"id":"ASB-A-303227969-10e74499","deprecated":false,"digest":{"threshold":0.9,"line_hashes":["101138393458861100048541495691845930810","126491840937780628697410403373514744131","258008528360797433471288325304487224116","28783475577963723089655229407501253500","11803760918395638239289081343448805437","272350059164555836817037866321220327227"]},"signature_version":"v1","signature_type":"Line","source":"https://googleplex-android.googlesource.com/platform/frameworks/base/+/509d619b2f9a52c5f3a88dbaa85b9bc7f66deaea"},{"target":{"function":"allowPackageAccess","file":"apex/blobstore/service/java/com/android/server/blob/BlobStoreSession.java"},"id":"ASB-A-303227969-11fbf514","deprecated":false,"digest":{"length":540,"function_hash":"241942173066533732740582469164623051520"},"signature_version":"v1","signature_type":"Function","source":"https://googleplex-android.googlesource.com/platform/frameworks/base/+/509d619b2f9a52c5f3a88dbaa85b9bc7f66deaea"},{"target":{"function":"allowPackageAccess","file":"apex/blobstore/framework/java/android/app/blob/BlobStoreManager.java"},"id":"ASB-A-303227969-1a7144b9","deprecated":false,"digest":{"length":315,"function_hash":"281638815089719090853918643520913630402"},"signature_version":"v1","signature_type":"Function","source":"https://googleplex-android.googlesource.com/platform/frameworks/base/+/509d619b2f9a52c5f3a88dbaa85b9bc7f66deaea"},{"target":{"file":"apex/blobstore/framework/java/android/app/blob/BlobStoreManager.java"},"id":"ASB-A-303227969-f4641c03","deprecated":false,"digest":{"threshold":0.9,"line_hashes":["37402569406643562322314055412458750040","3005921560461445780243703699796863845","87636568802040399672645385484965157980","73490189280143943928878129018643309051","23360089263224615556521682113737045181","42998921169238507580766210385903023673","257869726945214116607809097943509203135","313877664070915578054626057193338148194","74788398263807374059790075925970845467","169316865874818736176730999644787443203","172099645355247615168091416713322542175","8316593249702131755371373281488748518","274311528236342019563972291867543170720","157282420949475499776412570768254423344"]},"signature_version":"v1","signature_type":"Line","source":"https://googleplex-android.googlesource.com/platform/frameworks/base/+/509d619b2f9a52c5f3a88dbaa85b9bc7f66deaea"}],"spl":"2025-06-01","types":["DoS"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv-test/ASB-A-303227969.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2025-06-01"}]}],"versions":["13"],"ecosystem_specific":{"fixes":["https://googleplex-android.googlesource.com/platform/frameworks/base/+/fe01a389c8c74ea408935f9bc2b16edea5d55975"],"vanir_signatures":[{"target":{"function":"allowPackageAccess","file":"apex/blobstore/framework/java/android/app/blob/BlobStoreManager.java"},"id":"ASB-A-303227969-7b347f9f","deprecated":false,"digest":{"length":315,"function_hash":"281638815089719090853918643520913630402"},"signature_version":"v1","signature_type":"Function","source":"https://googleplex-android.googlesource.com/platform/frameworks/base/+/fe01a389c8c74ea408935f9bc2b16edea5d55975"},{"target":{"file":"apex/blobstore/service/java/com/android/server/blob/BlobStoreSession.java"},"id":"ASB-A-303227969-92cdf74e","deprecated":false,"digest":{"threshold":0.9,"line_hashes":["101138393458861100048541495691845930810","126491840937780628697410403373514744131","258008528360797433471288325304487224116","28783475577963723089655229407501253500","11803760918395638239289081343448805437","272350059164555836817037866321220327227"]},"signature_version":"v1","signature_type":"Line","source":"https://googleplex-android.googlesource.com/platform/frameworks/base/+/fe01a389c8c74ea408935f9bc2b16edea5d55975"},{"target":{"file":"apex/blobstore/framework/java/android/app/blob/BlobStoreManager.java"},"id":"ASB-A-303227969-932a1d81","deprecated":false,"digest":{"threshold":0.9,"line_hashes":["37402569406643562322314055412458750040","3005921560461445780243703699796863845","87636568802040399672645385484965157980","73490189280143943928878129018643309051","23360089263224615556521682113737045181","42998921169238507580766210385903023673","257869726945214116607809097943509203135","313877664070915578054626057193338148194","74788398263807374059790075925970845467","169316865874818736176730999644787443203","172099645355247615168091416713322542175","8316593249702131755371373281488748518","274311528236342019563972291867543170720","157282420949475499776412570768254423344"]},"signature_version":"v1","signature_type":"Line","source":"https://googleplex-android.googlesource.com/platform/frameworks/base/+/fe01a389c8c74ea408935f9bc2b16edea5d55975"},{"target":{"function":"allowPackageAccess","file":"apex/blobstore/service/java/com/android/server/blob/BlobStoreSession.java"},"id":"ASB-A-303227969-dc977f4e","deprecated":false,"digest":{"length":540,"function_hash":"241942173066533732740582469164623051520"},"signature_version":"v1","signature_type":"Function","source":"https://googleplex-android.googlesource.com/platform/frameworks/base/+/fe01a389c8c74ea408935f9bc2b16edea5d55975"}],"spl":"2025-06-01","types":["DoS"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv-test/ASB-A-303227969.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2025-06-01"}]}],"versions":["14"],"ecosystem_specific":{"fixes":["https://googleplex-android.googlesource.com/platform/frameworks/base/+/fe01a389c8c74ea408935f9bc2b16edea5d55975"],"vanir_signatures":[{"target":{"function":"allowPackageAccess","file":"apex/blobstore/framework/java/android/app/blob/BlobStoreManager.java"},"id":"ASB-A-303227969-4abd83a6","deprecated":false,"digest":{"length":315,"function_hash":"281638815089719090853918643520913630402"},"signature_version":"v1","signature_type":"Function","source":"https://googleplex-android.googlesource.com/platform/frameworks/base/+/fe01a389c8c74ea408935f9bc2b16edea5d55975"},{"target":{"file":"apex/blobstore/service/java/com/android/server/blob/BlobStoreSession.java"},"id":"ASB-A-303227969-51f738e8","deprecated":false,"digest":{"threshold":0.9,"line_hashes":["101138393458861100048541495691845930810","126491840937780628697410403373514744131","258008528360797433471288325304487224116","28783475577963723089655229407501253500","11803760918395638239289081343448805437","272350059164555836817037866321220327227"]},"signature_version":"v1","signature_type":"Line","source":"https://googleplex-android.googlesource.com/platform/frameworks/base/+/fe01a389c8c74ea408935f9bc2b16edea5d55975"},{"target":{"file":"apex/blobstore/framework/java/android/app/blob/BlobStoreManager.java"},"id":"ASB-A-303227969-77d5d2f6","deprecated":false,"digest":{"threshold":0.9,"line_hashes":["37402569406643562322314055412458750040","3005921560461445780243703699796863845","87636568802040399672645385484965157980","73490189280143943928878129018643309051","23360089263224615556521682113737045181","42998921169238507580766210385903023673","257869726945214116607809097943509203135","313877664070915578054626057193338148194","74788398263807374059790075925970845467","169316865874818736176730999644787443203","172099645355247615168091416713322542175","8316593249702131755371373281488748518","274311528236342019563972291867543170720","157282420949475499776412570768254423344"]},"signature_version":"v1","signature_type":"Line","source":"https://googleplex-android.googlesource.com/platform/frameworks/base/+/fe01a389c8c74ea408935f9bc2b16edea5d55975"},{"target":{"function":"allowPackageAccess","file":"apex/blobstore/service/java/com/android/server/blob/BlobStoreSession.java"},"id":"ASB-A-303227969-ebb90bf3","deprecated":false,"digest":{"length":540,"function_hash":"241942173066533732740582469164623051520"},"signature_version":"v1","signature_type":"Function","source":"https://googleplex-android.googlesource.com/platform/frameworks/base/+/fe01a389c8c74ea408935f9bc2b16edea5d55975"}],"spl":"2025-06-01","types":["DoS"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv-test/ASB-A-303227969.json"}}],"schema_version":"1.7.5"}