In registerPhoneAccount of PhoneAccountRegistrar.java, there is a possible way to prevent the user from selecting a phone account due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"spl": "2022-06-01",
"fixes": [
"https://android.googlesource.com/platform/packages/services/Telecomm/+/75f2ea6ebd5f866496c7f1bef3337b86a39e9152"
],
"types": [
"DoS"
],
"vanir_signatures": [
{
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"119827081916437722958919220062150943046",
"11280071020601380483123406433193155057",
"189819308001544228795258045489561716525",
"15810186892751429269108534318145655592",
"19336818584774617646790386783007212283",
"20780942585342164637999031268004629893",
"253589766672866351852598611145545113643",
"152258750109892521560303294433341278015",
"248212436099958984108720029049369657084",
"13549174694003815055021380661333280128",
"220740656161783853500053519223408510228"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/packages/services/Telecomm/+/75f2ea6ebd5f866496c7f1bef3337b86a39e9152",
"target": {
"file": "src/com/android/server/telecom/PhoneAccountRegistrar.java"
},
"id": "ASB-A-217934478-9be18b9f"
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 347.0,
"function_hash": "199638690763305076697223760730820621677"
},
"source": "https://android.googlesource.com/platform/packages/services/Telecomm/+/75f2ea6ebd5f866496c7f1bef3337b86a39e9152",
"target": {
"function": "registerPhoneAccount",
"file": "src/com/android/server/telecom/PhoneAccountRegistrar.java"
},
"id": "ASB-A-217934478-f82d088d"
}
],
"severity": "High"
}{
"spl": "2022-06-01",
"fixes": [
"https://android.googlesource.com/platform/packages/services/Telecomm/+/eb3394e3a8e21cd07c4f7a7ad43494ba14a8cbf4"
],
"types": [
"DoS"
],
"vanir_signatures": [
{
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"119827081916437722958919220062150943046",
"11280071020601380483123406433193155057",
"189819308001544228795258045489561716525",
"15810186892751429269108534318145655592",
"19336818584774617646790386783007212283",
"20780942585342164637999031268004629893",
"253589766672866351852598611145545113643",
"152258750109892521560303294433341278015",
"248212436099958984108720029049369657084",
"13549174694003815055021380661333280128",
"220740656161783853500053519223408510228"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/packages/services/Telecomm/+/eb3394e3a8e21cd07c4f7a7ad43494ba14a8cbf4",
"target": {
"file": "src/com/android/server/telecom/PhoneAccountRegistrar.java"
},
"id": "ASB-A-217934478-319ad33d"
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 347.0,
"function_hash": "199638690763305076697223760730820621677"
},
"source": "https://android.googlesource.com/platform/packages/services/Telecomm/+/eb3394e3a8e21cd07c4f7a7ad43494ba14a8cbf4",
"target": {
"function": "registerPhoneAccount",
"file": "src/com/android/server/telecom/PhoneAccountRegistrar.java"
},
"id": "ASB-A-217934478-4622ef1a"
}
],
"severity": "High"
}{
"spl": "2022-06-01",
"fixes": [
"https://android.googlesource.com/platform/packages/services/Telecomm/+/eb3394e3a8e21cd07c4f7a7ad43494ba14a8cbf4"
],
"types": [
"DoS"
],
"vanir_signatures": [
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 347.0,
"function_hash": "199638690763305076697223760730820621677"
},
"source": "https://android.googlesource.com/platform/packages/services/Telecomm/+/eb3394e3a8e21cd07c4f7a7ad43494ba14a8cbf4",
"target": {
"function": "registerPhoneAccount",
"file": "src/com/android/server/telecom/PhoneAccountRegistrar.java"
},
"id": "ASB-A-217934478-5efed695"
},
{
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"119827081916437722958919220062150943046",
"11280071020601380483123406433193155057",
"189819308001544228795258045489561716525",
"15810186892751429269108534318145655592",
"19336818584774617646790386783007212283",
"20780942585342164637999031268004629893",
"253589766672866351852598611145545113643",
"152258750109892521560303294433341278015",
"248212436099958984108720029049369657084",
"13549174694003815055021380661333280128",
"220740656161783853500053519223408510228"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/packages/services/Telecomm/+/eb3394e3a8e21cd07c4f7a7ad43494ba14a8cbf4",
"target": {
"file": "src/com/android/server/telecom/PhoneAccountRegistrar.java"
},
"id": "ASB-A-217934478-f1ebf0e6"
}
],
"severity": "High"
}{
"spl": "2022-06-01",
"fixes": [
"https://android.googlesource.com/platform/packages/services/Telecomm/+/eb3394e3a8e21cd07c4f7a7ad43494ba14a8cbf4"
],
"types": [
"DoS"
],
"vanir_signatures": [
{
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"119827081916437722958919220062150943046",
"11280071020601380483123406433193155057",
"189819308001544228795258045489561716525",
"15810186892751429269108534318145655592",
"19336818584774617646790386783007212283",
"20780942585342164637999031268004629893",
"253589766672866351852598611145545113643",
"152258750109892521560303294433341278015",
"248212436099958984108720029049369657084",
"13549174694003815055021380661333280128",
"220740656161783853500053519223408510228"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/packages/services/Telecomm/+/eb3394e3a8e21cd07c4f7a7ad43494ba14a8cbf4",
"target": {
"file": "src/com/android/server/telecom/PhoneAccountRegistrar.java"
},
"id": "ASB-A-217934478-248f97ab"
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 347.0,
"function_hash": "199638690763305076697223760730820621677"
},
"source": "https://android.googlesource.com/platform/packages/services/Telecomm/+/eb3394e3a8e21cd07c4f7a7ad43494ba14a8cbf4",
"target": {
"function": "registerPhoneAccount",
"file": "src/com/android/server/telecom/PhoneAccountRegistrar.java"
},
"id": "ASB-A-217934478-96e6e192"
}
],
"severity": "High"
}{
"spl": "2022-06-01",
"fixes": [
"https://android.googlesource.com/platform/packages/services/Telecomm/+/eb3394e3a8e21cd07c4f7a7ad43494ba14a8cbf4"
],
"types": [
"DoS"
],
"vanir_signatures": [
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 347.0,
"function_hash": "199638690763305076697223760730820621677"
},
"source": "https://android.googlesource.com/platform/packages/services/Telecomm/+/eb3394e3a8e21cd07c4f7a7ad43494ba14a8cbf4",
"target": {
"function": "registerPhoneAccount",
"file": "src/com/android/server/telecom/PhoneAccountRegistrar.java"
},
"id": "ASB-A-217934478-2ef2b7ad"
},
{
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"119827081916437722958919220062150943046",
"11280071020601380483123406433193155057",
"189819308001544228795258045489561716525",
"15810186892751429269108534318145655592",
"19336818584774617646790386783007212283",
"20780942585342164637999031268004629893",
"253589766672866351852598611145545113643",
"152258750109892521560303294433341278015",
"248212436099958984108720029049369657084",
"13549174694003815055021380661333280128",
"220740656161783853500053519223408510228"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/packages/services/Telecomm/+/eb3394e3a8e21cd07c4f7a7ad43494ba14a8cbf4",
"target": {
"file": "src/com/android/server/telecom/PhoneAccountRegistrar.java"
},
"id": "ASB-A-217934478-5abf7256"
}
],
"severity": "High"
}