In Threshold::getHistogram of ImageProcessHelper.java, there is a possible crash loop due to an uncaught exception. This could lead to local denial of service with User execution privileges needed. User interaction is needed for exploitation.
{
"types": [
"DoS"
],
"spl": "2020-08-01",
"vanir_signatures": [
{
"signature_type": "Line",
"target": {
"file": "packages/SystemUI/src/com/android/systemui/glwallpaper/ImageGLWallpaper.java"
},
"deprecated": false,
"digest": {
"line_hashes": [
"172260931148576283508502282930086536287",
"69762119069934583538150944477062063644",
"41788209591480995343599634629871276831",
"206968977824076241877853040457269759372",
"326525929080557567519001109057930205169",
"164910111290914432699794303549929867816",
"178157768945384015450149964697896740726",
"73414202330073951450347636173102404077",
"279461491752877701018903146720756939835",
"23239281096636916967595080502995361158",
"15548221547238923445524989901820729827",
"108595916678578282602218670410662378036"
],
"threshold": 0.9
},
"id": "ASB-A-156087409-023455cf",
"source": "https://android.googlesource.com/platform/frameworks/base/+/4d467f1c7d7d355d0ac71a12ec8c2df07f756046",
"signature_version": "v1"
},
{
"signature_type": "Function",
"target": {
"file": "packages/SystemUI/src/com/android/systemui/glwallpaper/ImageGLWallpaper.java",
"function": "setupTexture"
},
"deprecated": false,
"digest": {
"function_hash": "164056971811273129981778420265352160951",
"length": 544.0
},
"id": "ASB-A-156087409-0d1c9cda",
"source": "https://android.googlesource.com/platform/frameworks/base/+/4d467f1c7d7d355d0ac71a12ec8c2df07f756046",
"signature_version": "v1"
},
{
"id": "ASB-A-156087409-622b49ca",
"target": {
"file": "packages/SystemUI/src/com/android/systemui/glwallpaper/ImageProcessHelper.java",
"function": "toGrayscale"
},
"digest": {
"function_hash": "223063371253574149007117641398441725620",
"length": 385.0
},
"signature_type": "Function",
"deprecated": false,
"source": "https://android.googlesource.com/platform/frameworks/base/+/4d467f1c7d7d355d0ac71a12ec8c2df07f756046",
"signature_version": "v1"
},
{
"id": "ASB-A-156087409-7ebeb076",
"target": {
"file": "packages/SystemUI/src/com/android/systemui/glwallpaper/ImageProcessHelper.java"
},
"deprecated": false,
"digest": {
"line_hashes": [
"146300149699477825008823799645957678832",
"234345092561006495441846688986047312641",
"294260020192796777473674563879224907018",
"177470060885181306498828198811489643335",
"122642257004972993641766446087570019445",
"33566425180851759401497121244069608413",
"5725491801484050306998555613500153594",
"265905230549412327255711043576225241185"
],
"threshold": 0.9
},
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/frameworks/base/+/4d467f1c7d7d355d0ac71a12ec8c2df07f756046",
"signature_version": "v1"
},
{
"id": "ASB-A-156087409-ec2a255b",
"target": {
"file": "packages/SystemUI/src/com/android/systemui/glwallpaper/ImageProcessHelper.java",
"function": "doInBackground"
},
"deprecated": false,
"digest": {
"function_hash": "154171055084584259847909281917439675666",
"length": 227.0
},
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/frameworks/base/+/4d467f1c7d7d355d0ac71a12ec8c2df07f756046",
"signature_version": "v1"
}
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/4d467f1c7d7d355d0ac71a12ec8c2df07f756046"
],
"severity": "High"
}
{
"types": [
"DoS"
],
"spl": "2020-08-01",
"vanir_signatures": [
{
"id": "ASB-A-156087409-10e968af",
"target": {
"file": "packages/SystemUI/src/com/android/systemui/glwallpaper/ImageGLWallpaper.java"
},
"deprecated": false,
"digest": {
"line_hashes": [
"172260931148576283508502282930086536287",
"69762119069934583538150944477062063644",
"41788209591480995343599634629871276831",
"206968977824076241877853040457269759372",
"326525929080557567519001109057930205169",
"164910111290914432699794303549929867816",
"178157768945384015450149964697896740726",
"73414202330073951450347636173102404077",
"279461491752877701018903146720756939835",
"23239281096636916967595080502995361158",
"15548221547238923445524989901820729827",
"108595916678578282602218670410662378036"
],
"threshold": 0.9
},
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/frameworks/base/+/4d467f1c7d7d355d0ac71a12ec8c2df07f756046",
"signature_version": "v1"
},
{
"id": "ASB-A-156087409-1cc6ae50",
"target": {
"file": "packages/SystemUI/src/com/android/systemui/glwallpaper/ImageGLWallpaper.java",
"function": "setupTexture"
},
"deprecated": false,
"digest": {
"function_hash": "164056971811273129981778420265352160951",
"length": 544.0
},
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/frameworks/base/+/4d467f1c7d7d355d0ac71a12ec8c2df07f756046",
"signature_version": "v1"
},
{
"id": "ASB-A-156087409-70130112",
"target": {
"file": "packages/SystemUI/src/com/android/systemui/glwallpaper/ImageProcessHelper.java",
"function": "toGrayscale"
},
"deprecated": false,
"digest": {
"function_hash": "223063371253574149007117641398441725620",
"length": 385.0
},
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/frameworks/base/+/4d467f1c7d7d355d0ac71a12ec8c2df07f756046",
"signature_version": "v1"
},
{
"id": "ASB-A-156087409-c63e9230",
"target": {
"file": "packages/SystemUI/src/com/android/systemui/glwallpaper/ImageProcessHelper.java",
"function": "doInBackground"
},
"deprecated": false,
"digest": {
"function_hash": "154171055084584259847909281917439675666",
"length": 227.0
},
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/frameworks/base/+/4d467f1c7d7d355d0ac71a12ec8c2df07f756046",
"signature_version": "v1"
},
{
"id": "ASB-A-156087409-d469d53f",
"target": {
"file": "packages/SystemUI/src/com/android/systemui/glwallpaper/ImageProcessHelper.java"
},
"deprecated": false,
"digest": {
"line_hashes": [
"146300149699477825008823799645957678832",
"234345092561006495441846688986047312641",
"294260020192796777473674563879224907018",
"177470060885181306498828198811489643335",
"122642257004972993641766446087570019445",
"33566425180851759401497121244069608413",
"5725491801484050306998555613500153594",
"265905230549412327255711043576225241185"
],
"threshold": 0.9
},
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/frameworks/base/+/4d467f1c7d7d355d0ac71a12ec8c2df07f756046",
"signature_version": "v1"
}
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/4d467f1c7d7d355d0ac71a12ec8c2df07f756046"
],
"severity": "High"
}
{
"types": [
"DoS"
],
"spl": "2020-08-01",
"vanir_signatures": [
{
"id": "ASB-A-156087409-03c4889c",
"target": {
"file": "packages/SystemUI/src/com/android/systemui/glwallpaper/ImageProcessHelper.java",
"function": "toGrayscale"
},
"deprecated": false,
"digest": {
"function_hash": "223063371253574149007117641398441725620",
"length": 385.0
},
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/frameworks/base/+/4d467f1c7d7d355d0ac71a12ec8c2df07f756046",
"signature_version": "v1"
},
{
"id": "ASB-A-156087409-28bf4ac7",
"target": {
"file": "packages/SystemUI/src/com/android/systemui/glwallpaper/ImageGLWallpaper.java"
},
"deprecated": false,
"digest": {
"line_hashes": [
"172260931148576283508502282930086536287",
"69762119069934583538150944477062063644",
"41788209591480995343599634629871276831",
"206968977824076241877853040457269759372",
"326525929080557567519001109057930205169",
"164910111290914432699794303549929867816",
"178157768945384015450149964697896740726",
"73414202330073951450347636173102404077",
"279461491752877701018903146720756939835",
"23239281096636916967595080502995361158",
"15548221547238923445524989901820729827",
"108595916678578282602218670410662378036"
],
"threshold": 0.9
},
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/frameworks/base/+/4d467f1c7d7d355d0ac71a12ec8c2df07f756046",
"signature_version": "v1"
},
{
"signature_type": "Line",
"target": {
"file": "packages/SystemUI/src/com/android/systemui/glwallpaper/ImageProcessHelper.java"
},
"deprecated": false,
"digest": {
"line_hashes": [
"146300149699477825008823799645957678832",
"234345092561006495441846688986047312641",
"294260020192796777473674563879224907018",
"177470060885181306498828198811489643335",
"122642257004972993641766446087570019445",
"33566425180851759401497121244069608413",
"5725491801484050306998555613500153594",
"265905230549412327255711043576225241185"
],
"threshold": 0.9
},
"id": "ASB-A-156087409-77780d66",
"source": "https://android.googlesource.com/platform/frameworks/base/+/4d467f1c7d7d355d0ac71a12ec8c2df07f756046",
"signature_version": "v1"
},
{
"id": "ASB-A-156087409-bb27b17d",
"target": {
"file": "packages/SystemUI/src/com/android/systemui/glwallpaper/ImageProcessHelper.java",
"function": "doInBackground"
},
"deprecated": false,
"digest": {
"function_hash": "154171055084584259847909281917439675666",
"length": 227.0
},
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/frameworks/base/+/4d467f1c7d7d355d0ac71a12ec8c2df07f756046",
"signature_version": "v1"
},
{
"id": "ASB-A-156087409-fbef8337",
"target": {
"file": "packages/SystemUI/src/com/android/systemui/glwallpaper/ImageGLWallpaper.java",
"function": "setupTexture"
},
"deprecated": false,
"digest": {
"function_hash": "164056971811273129981778420265352160951",
"length": 544.0
},
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/frameworks/base/+/4d467f1c7d7d355d0ac71a12ec8c2df07f756046",
"signature_version": "v1"
}
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/4d467f1c7d7d355d0ac71a12ec8c2df07f756046"
],
"severity": "High"
}