In SystemSettingsValidators, there is a possible permanent denial of service due to missing bounds checks on UI settings. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.
{
"types": [
"DoS"
],
"severity": "High",
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/9af8c6364f34c7d7be6c6dff23d3b7052c0a914d"
],
"spl": "2021-02-01",
"vanir_signatures": [
{
"deprecated": false,
"target": {
"file": "core/java/android/provider/Settings.java"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"223335318938469518514426245447269022788",
"57640350119750408815849764577241693968",
"188541251490836277355070719114386292828",
"71992009000569554972012370457541178099",
"227815405439443887615219270422784671254",
"278336947106054212457390456237733707848",
"198326124730402711151032827429121598672",
"265324216888424422881601950607023274360",
"336824082160175114097742888306958115358",
"35361513993377667144037176944940776463",
"310683188912784393686044503234209267756",
"73191886621207884001845459534189687069",
"201580910959343343568664026600799026420"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/9af8c6364f34c7d7be6c6dff23d3b7052c0a914d",
"id": "ASB-A-156260178-7109ffe4"
},
{
"id": "ASB-A-156260178-7b7cd244",
"target": {
"file": "core/java/android/provider/Settings.java",
"function": "validate"
},
"signature_type": "Function",
"digest": {
"function_hash": "284531671753312080076594849960250499167",
"length": 170.0
},
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/9af8c6364f34c7d7be6c6dff23d3b7052c0a914d",
"deprecated": false
}
]
}
{
"types": [
"DoS"
],
"severity": "High",
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/3d79b643d4e566d16f7a0338d7d6934f6ca7317e"
],
"spl": "2021-02-01",
"vanir_signatures": [
{
"deprecated": false,
"target": {
"file": "packages/SettingsProvider/src/android/provider/settings/validators/SystemSettingsValidators.java"
},
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/3d79b643d4e566d16f7a0338d7d6934f6ca7317e",
"digest": {
"line_hashes": [
"251868267948930631262842790889734041357",
"278643010149445101918560854673039829933",
"201997463402855824403463622314323952034",
"122767186214571317586050533567446794309",
"90754409172355587776731467853062817965",
"26695598090596683315798686331415977201",
"198326124730402711151032827429121598672",
"265324216888424422881601950607023274360",
"61386428927940696248194268146844998057",
"293845088149911133938529335021236916332",
"109811024417938688278143307134846467099",
"9928541951384799704259118022938480032"
],
"threshold": 0.9
},
"id": "ASB-A-156260178-4ec564c8"
}
]
}