In ellipsize of Layout.java, there is a possible ANR due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation.
{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/ae1912b62f7dfa361acfbe472cb8a49cd60f746e"
],
"types": [
"DoS"
],
"severity": "Critical",
"vanir_signatures": [
{
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/frameworks/base/+/ae1912b62f7dfa361acfbe472cb8a49cd60f746e",
"digest": {
"threshold": 0.9,
"line_hashes": [
"63926503829772139475331186910506526789",
"28239393110218302850348352914582673531",
"222828594013851564209753251987887515678",
"158592047012803690355168739532323569622",
"333463272794442017480842796937830124036",
"67138694718849171778855501042280350838",
"34344933888685079412579448120341583470",
"250926320257337631873902051127063590435",
"171798235291792648134780821227263046983",
"112132678533175319831151726141166017061",
"27350450974079371551709840518874292715",
"44399722912932521744706466801968843504",
"40424602961670547399998372962164154736",
"9751479053932570361372348064333135748"
]
},
"id": "ASB-A-188913943-413e31a7",
"deprecated": false,
"target": {
"file": "core/java/android/text/Layout.java"
}
},
{
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/frameworks/base/+/ae1912b62f7dfa361acfbe472cb8a49cd60f746e",
"digest": {
"function_hash": "156382008959839712373193718533682021095",
"length": 475.0
},
"id": "ASB-A-188913943-4f2e26a8",
"deprecated": false,
"target": {
"file": "core/java/android/text/Layout.java",
"function": "ellipsize"
}
}
],
"spl": "2021-09-01"
}
{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/0c17ccc4af2b28823a12cf846e9222c3c8b472de"
],
"types": [
"DoS"
],
"severity": "Critical",
"vanir_signatures": [
{
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/frameworks/base/+/0c17ccc4af2b28823a12cf846e9222c3c8b472de",
"digest": {
"function_hash": "228119862197615708800573578025386328995",
"length": 653.0
},
"id": "ASB-A-188913943-291c359e",
"deprecated": false,
"target": {
"file": "core/java/android/text/Layout.java",
"function": "ellipsize"
}
},
{
"signature_version": "v1",
"id": "ASB-A-188913943-85d16e93",
"source": "https://android.googlesource.com/platform/frameworks/base/+/0c17ccc4af2b28823a12cf846e9222c3c8b472de",
"digest": {
"threshold": 0.9,
"line_hashes": [
"280647693780655762010388648338353105580",
"269323079586387149340447110286492581003",
"41218508207874382870791967070706919753",
"238272673216622559775883144479787168208",
"61230789776526038594925698889595329269",
"218007647151906224799312873707698856534",
"284361095032150666502957903618747782743",
"181450820293708584103609371695807181608",
"40424602961670547399998372962164154736",
"9751479053932570361372348064333135748"
]
},
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "core/java/android/text/Layout.java"
}
}
],
"spl": "2021-09-01"
}
{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/5238a7a79b7e24099e3482d81dd2253bc98f2427"
],
"types": [
"DoS"
],
"severity": "Critical",
"vanir_signatures": [
{
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/frameworks/base/+/5238a7a79b7e24099e3482d81dd2253bc98f2427",
"digest": {
"function_hash": "228119862197615708800573578025386328995",
"length": 653.0
},
"id": "ASB-A-188913943-70901f4d",
"deprecated": false,
"target": {
"file": "core/java/android/text/Layout.java",
"function": "ellipsize"
}
},
{
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/frameworks/base/+/5238a7a79b7e24099e3482d81dd2253bc98f2427",
"digest": {
"threshold": 0.9,
"line_hashes": [
"280647693780655762010388648338353105580",
"269323079586387149340447110286492581003",
"41218508207874382870791967070706919753",
"238272673216622559775883144479787168208",
"61230789776526038594925698889595329269",
"218007647151906224799312873707698856534",
"284361095032150666502957903618747782743",
"181450820293708584103609371695807181608",
"40424602961670547399998372962164154736",
"9751479053932570361372348064333135748"
]
},
"id": "ASB-A-188913943-8a9fc0bb",
"deprecated": false,
"target": {
"file": "core/java/android/text/Layout.java"
}
}
],
"spl": "2021-09-01"
}
{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/599f1b76fad4876fb060240db6d11de7da605834"
],
"types": [
"DoS"
],
"severity": "Critical",
"vanir_signatures": [
{
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/frameworks/base/+/599f1b76fad4876fb060240db6d11de7da605834",
"digest": {
"function_hash": "228119862197615708800573578025386328995",
"length": 653.0
},
"id": "ASB-A-188913943-b65dce1c",
"deprecated": false,
"target": {
"file": "core/java/android/text/Layout.java",
"function": "ellipsize"
}
},
{
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/frameworks/base/+/599f1b76fad4876fb060240db6d11de7da605834",
"digest": {
"threshold": 0.9,
"line_hashes": [
"280647693780655762010388648338353105580",
"269323079586387149340447110286492581003",
"41218508207874382870791967070706919753",
"238272673216622559775883144479787168208",
"61230789776526038594925698889595329269",
"218007647151906224799312873707698856534",
"284361095032150666502957903618747782743",
"181450820293708584103609371695807181608",
"40424602961670547399998372962164154736",
"9751479053932570361372348064333135748"
]
},
"id": "ASB-A-188913943-fe4e357a",
"deprecated": false,
"target": {
"file": "core/java/android/text/Layout.java"
}
}
],
"spl": "2021-09-01"
}