{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2026:OLYZ7A2DGGRNXOFQIT5FYIEHRD","short_pith_number":"pith:OLYZ7A2D","schema_version":"1.0","canonical_sha256":"72f19f834331a2dbb8b044fa5c208788e5d18ed58da5631923d7b4f875192eea","source":{"kind":"arxiv","id":"2606.07420","version":1},"attestation_state":"computed","paper":{"title":"Lost in Migration: Exposing Android Framework Vulnerabilities in Parallel Java-Kotlin Implementations","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Debin Gao, Rui Li, Wenrui Diao","submitted_at":"2026-06-05T16:15:03Z","abstract_excerpt":"Android has adopted Kotlin alongside Java across apps and core system components. During this shift, we observe parallel implementations in the Android Open Source Project (AOSP) where the same component is implemented in both Java and Kotlin. In principle, their functional purposes are identical. In practice, subtle semantic divergences can appear. Such divergences are not vulnerabilities by themselves, but they provide useful clues that may reveal flaws in surrounding enforcement logic. To the best of our knowledge, this paper presents the first systematic study of Java-Kotlin parallel imple"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2606.07420","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-06-05T16:15:03Z","cross_cats_sorted":[],"title_canon_sha256":"b238ab96610b20dfdbac87df0f6ff84a77e2650d5e2dd6f338840e0f0e11ae67","abstract_canon_sha256":"1f77f077b2ecf09ee6104ed95b9055e04e7d3126724d9f258e17c87dc319fa9e"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-06-08T01:05:25.976712Z","signature_b64":"gWkcxIo/fC/wlaiBuM9/TXC3hyg8/MIt1KkyKd1euRPgb3WIuNddvjisezr0bIG7QFwXi03ffYXcgvgdhUfeBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"72f19f834331a2dbb8b044fa5c208788e5d18ed58da5631923d7b4f875192eea","last_reissued_at":"2026-06-08T01:05:25.975805Z","signature_status":"signed_v1","first_computed_at":"2026-06-08T01:05:25.975805Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Lost in Migration: Exposing Android Framework Vulnerabilities in Parallel Java-Kotlin Implementations","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Debin Gao, Rui Li, Wenrui Diao","submitted_at":"2026-06-05T16:15:03Z","abstract_excerpt":"Android has adopted Kotlin alongside Java across apps and core system components. During this shift, we observe parallel implementations in the Android Open Source Project (AOSP) where the same component is implemented in both Java and Kotlin. In principle, their functional purposes are identical. In practice, subtle semantic divergences can appear. Such divergences are not vulnerabilities by themselves, but they provide useful clues that may reveal flaws in surrounding enforcement logic. To the best of our knowledge, this paper presents the first systematic study of Java-Kotlin parallel imple"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.07420","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2606.07420/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2606.07420","created_at":"2026-06-08T01:05:25.975969+00:00"},{"alias_kind":"arxiv_version","alias_value":"2606.07420v1","created_at":"2026-06-08T01:05:25.975969+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.07420","created_at":"2026-06-08T01:05:25.975969+00:00"},{"alias_kind":"pith_short_12","alias_value":"OLYZ7A2DGGRN","created_at":"2026-06-08T01:05:25.975969+00:00"},{"alias_kind":"pith_short_16","alias_value":"OLYZ7A2DGGRNXOFQ","created_at":"2026-06-08T01:05:25.975969+00:00"},{"alias_kind":"pith_short_8","alias_value":"OLYZ7A2D","created_at":"2026-06-08T01:05:25.975969+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/OLYZ7A2DGGRNXOFQIT5FYIEHRD","json":"https://pith.science/pith/OLYZ7A2DGGRNXOFQIT5FYIEHRD.json","graph_json":"https://pith.science/api/pith-number/OLYZ7A2DGGRNXOFQIT5FYIEHRD/graph.json","events_json":"https://pith.science/api/pith-number/OLYZ7A2DGGRNXOFQIT5FYIEHRD/events.json","paper":"https://pith.science/paper/OLYZ7A2D"},"agent_actions":{"view_html":"https://pith.science/pith/OLYZ7A2DGGRNXOFQIT5FYIEHRD","download_json":"https://pith.science/pith/OLYZ7A2DGGRNXOFQIT5FYIEHRD.json","view_paper":"https://pith.science/paper/OLYZ7A2D","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2606.07420&json=true","fetch_graph":"https://pith.science/api/pith-number/OLYZ7A2DGGRNXOFQIT5FYIEHRD/graph.json","fetch_events":"https://pith.science/api/pith-number/OLYZ7A2DGGRNXOFQIT5FYIEHRD/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/OLYZ7A2DGGRNXOFQIT5FYIEHRD/action/timestamp_anchor","attest_storage":"https://pith.science/pith/OLYZ7A2DGGRNXOFQIT5FYIEHRD/action/storage_attestation","attest_author":"https://pith.science/pith/OLYZ7A2DGGRNXOFQIT5FYIEHRD/action/author_attestation","sign_citation":"https://pith.science/pith/OLYZ7A2DGGRNXOFQIT5FYIEHRD/action/citation_signature","submit_replication":"https://pith.science/pith/OLYZ7A2DGGRNXOFQIT5FYIEHRD/action/replication_record"}},"created_at":"2026-06-08T01:05:25.975969+00:00","updated_at":"2026-06-08T01:05:25.975969+00:00"}