Skip to main content
LDOS
Participant
Oct 2, 2026 4:46 PM UTC
Open for Voting

Crashing due to memory error

For context: I run GrapheneOS, but many users of the Android and iOS apps can attest that Express suffers from frequent crashing and performance issues. In my case, it turned out to be triggering Graphene’s hardened memory allocation, which provided a detailed crash log that I hope will be useful to Adobe devs in fixing the issue for the platforms affected. If you’re one of them, please let me know if there’s any more technical info I can provide. <3

Issue: Express frequently crashes due to hardened_malloc error (detected write after free)
Product: Adobe Express (Mobile 31.0.0)
Platform: Android 17 / GrapheneOS 2026092501

3 replies

Rose DV
Community Manager
Community Manager
Oct 5, 2026 9:28 PM UTC

Hey ​@LHzGz OS,

Thank you for taking the time to pull the crash log.

I'm passing this to the engineering team along with the log. One thing that would help them: what action were you taking in the app when it crashed? (e.g. opening a project, editing, exporting?)

Rose

Translate
LDOS
LDOSAuthor
Participant
Oct 6, 2026 12:18 PM UTC

Hi Rose! I don’t remember what happened in this specific crash - it happens kinda randomly - but I can usually recreate it by switching focus between Express and other apps. It just died on me again while I was looking at exports in my Gallery.

EDIT: Added crash log for this one below.

type: crash
flags: dev options enabled
package: com.adobe.spark.post:914, targetSdk 36
osVersion: google/frankel/frankel:17/CP3A.260905.009/2026100201:user/release-keys
uid: 10292 (u:r:untrusted_app_34:s0:c36,c257,c512,c768)
cmdline: com.adobe.spark.post
processUptime: 293s

abortMessage: hardened_malloc: fatal allocator error: detected write after free

signal: 6 (SIGABRT), code -1 (SI_QUEUE)
threadName: NR_AppStateMon-
MTE: not enabled

backtrace:
/apex/com.android.runtime/lib64/bionic/libc.so (abort+160, pc 82250)
/apex/com.android.runtime/lib64/bionic/libc.so (fatal_error+48, pc 65020)
/apex/com.android.runtime/lib64/bionic/libc.so (allocate(unsigned int, unsigned long) (.__uniq.113816362394208727042336347611812082814)+2268, pc 621fc)
/apex/com.android.runtime/lib64/bionic/libc.so (malloc+44, pc 5d5bc)
/apex/com.android.art/lib64/libc++.so (operator new(unsigned long)+28, pc 1111e0)
/apex/com.android.art/lib64/libart.so (art::JNI<false>::GetStringChars(_JNIEnv*, _jstring*, unsigned char*)+244, pc 6a48c4)
/apex/com.android.i18n/lib64/libicu_jni.so (MatcherState::updateInput(_JNIEnv*, _jstring*)+112, pc d730)
/apex/com.android.i18n/lib64/libicu_jni.so (MatcherNative_setInputImpl(_JNIEnv*, _jclass*, long, _jstring*, int, int)+44, pc 15cdc)
/system/framework/arm64/boot-core-icu4j.oat (art_jni_trampoline+128, pc e7f30)
/system/framework/arm64/boot-core-icu4j.oat (com.android.icu.util.regex.MatcherNative.setInput+52, pc e77c4)
/system/framework/arm64/boot.oat (java.util.regex.Matcher.reset+300, pc 2426bc)
/system/framework/arm64/boot.oat (java.util.Scanner.makeSpace+460, pc 1e604c)
/system/framework/arm64/boot.oat (java.util.Scanner.readInput+68, pc 1e60d4)
/system/framework/arm64/boot.oat (java.util.Scanner.next+108, pc 1e65ec)
/data/app/~~_spu8s_YQEvKa-7pwdFE2w==/com.adobe.spark.post-jrLdZVTAcZlCVZ68NqnBhA==/oat/arm64/base.odex (com.scottyab.rootbeer.RootBeer.propsReader+544, pc 44c3160)
/data/app/~~_spu8s_YQEvKa-7pwdFE2w==/com.adobe.spark.post-jrLdZVTAcZlCVZ68NqnBhA==/oat/arm64/base.odex (com.scottyab.rootbeer.RootBeer.checkForDangerousProps+420, pc 44c37c4)
/data/app/~~_spu8s_YQEvKa-7pwdFE2w==/com.adobe.spark.post-jrLdZVTAcZlCVZ68NqnBhA==/oat/arm64/base.odex (com.scottyab.rootbeer.RootBeer.isRooted+124, pc 44c4fdc)
/data/app/~~_spu8s_YQEvKa-7pwdFE2w==/com.adobe.spark.post-jrLdZVTAcZlCVZ68NqnBhA==/oat/arm64/base.odex (com.newrelic.agent.android.ndk.NativeReporting.start+1904, pc 43d9ab0)
/data/app/~~_spu8s_YQEvKa-7pwdFE2w==/com.adobe.spark.post-jrLdZVTAcZlCVZ68NqnBhA==/oat/arm64/base.odex (com.newrelic.agent.android.AndroidAgentImpl.start+500, pc 43001f4)
/data/app/~~_spu8s_YQEvKa-7pwdFE2w==/com.adobe.spark.post-jrLdZVTAcZlCVZ68NqnBhA==/oat/arm64/base.odex (com.newrelic.agent.android.AndroidAgentImpl.applicationForegrounded+272, pc 42fc970)
/data/app/~~_spu8s_YQEvKa-7pwdFE2w==/com.adobe.spark.post-jrLdZVTAcZlCVZ68NqnBhA==/oat/arm64/base.odex (com.newrelic.agent.android.background.ApplicationStateMonitor.notifyApplicationInForeground+404, pc 434f244)
/data/app/~~_spu8s_YQEvKa-7pwdFE2w==/com.adobe.spark.post-jrLdZVTAcZlCVZ68NqnBhA==/oat/arm64/base.odex (com.newrelic.agent.android.background.ApplicationStateMonitor$$ExternalSyntheticLambda0.run+152, pc 434e5b8)
/system/framework/arm64/boot.oat (java.util.concurrent.ThreadPoolExecutor.runWorker+840, pc 21cb48)
/system/framework/arm64/boot.oat (java.util.concurrent.ThreadPoolExecutor$Worker.run+56, pc 221438)
/system/framework/arm64/boot.oat (java.lang.Thread.run+64, pc a9d10)
/apex/com.android.art/lib64/libart.so (art_quick_invoke_stub+612, pc 2a3194)
/apex/com.android.art/lib64/libart.so (art::ArtMethod::Invoke(art::Thread*, unsigned int*, unsigned int, art::JValue*, char const*)+148, pc 2a1404)
/apex/com.android.art/lib64/libart.so (art::Thread::CreateCallback(void*)+1392, pc 4de040)
/apex/com.android.art/lib64/libart.so (art::Thread::CreateCallbackWithUffdGc(void*)+12, pc 4ddabc)
/apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*) (.__uniq.67847048707805468364044055584648682506)+180, pc 96e24)
/apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+68, pc 85e14)

 

Translate
Rose DV
Community Manager
Community Manager
Oct 7, 2026 9:08 PM UTC

Hi, thanks for the follow-up and the second log - really helpful!

I'm passing both logs to the team together since they're related but distinct. We'll follow up here.

Rose

Translate