In multiple functions of JobStore.java, there is a possible way to cause a crash on startup due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/c98fb42b480b3beedc2d94de6110f50212c4aa0b"
],
"severity": "High",
"spl": "2023-06-01",
"vanir_signatures": [
{
"deprecated": false,
"signature_version": "v1",
"id": "ASB-A-246542285-02962334",
"digest": {
"length": 1103.0,
"function_hash": "136545259088351736556952524132594636377"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/c98fb42b480b3beedc2d94de6110f50212c4aa0b",
"signature_type": "Function",
"target": {
"file": "apex/jobscheduler/service/java/com/android/server/job/JobStore.java",
"function": "run"
}
},
{
"deprecated": false,
"signature_version": "v1",
"id": "ASB-A-246542285-8c650f88",
"digest": {
"length": 5097.0,
"function_hash": "159803640029266232665177633215008020851"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/c98fb42b480b3beedc2d94de6110f50212c4aa0b",
"signature_type": "Function",
"target": {
"file": "apex/jobscheduler/service/java/com/android/server/job/JobStore.java",
"function": "restoreJobFromXml"
}
},
{
"deprecated": false,
"signature_version": "v1",
"id": "ASB-A-246542285-eb787988",
"digest": {
"line_hashes": [
"88748618308055000220281674766198731040",
"249396715037558805745221194740979561064",
"164301605750507272451520189089934655050",
"109795612308487052653223368718562200607",
"155887119447236720631965822184620922830",
"195462494314817103218167905857025189667",
"181057859908330440942386339798719726241",
"55707820669319239591884054813340303362",
"76508389472740143566711447382965763458",
"6036956544649657987674883707972804403",
"185064586106528140455954287194035703738",
"310769436540893605940414805746805545034",
"98497899714125290758167772968008829574"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/c98fb42b480b3beedc2d94de6110f50212c4aa0b",
"signature_type": "Line",
"target": {
"file": "apex/jobscheduler/service/java/com/android/server/job/JobStore.java"
}
}
],
"types": [
"DoS"
]
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/df1ba00dd9f64a3ae9a9e05979dfae6a15c7e203"
],
"severity": "High",
"spl": "2023-06-01",
"vanir_signatures": [
{
"deprecated": false,
"signature_version": "v1",
"id": "ASB-A-246542285-1260ffc1",
"digest": {
"line_hashes": [
"88748618308055000220281674766198731040",
"249396715037558805745221194740979561064",
"164301605750507272451520189089934655050",
"109795612308487052653223368718562200607",
"191092451028706471989826207359428222321",
"176948151945717884359093361413297039595",
"312007121508315593880636888456202924387",
"55707820669319239591884054813340303362",
"76508389472740143566711447382965763458",
"6036956544649657987674883707972804403",
"185064586106528140455954287194035703738",
"310769436540893605940414805746805545034",
"98497899714125290758167772968008829574",
"184444492363715158236138147782101578844",
"251858206377763059149894888984118969576",
"45402239069496976582529813712329354330",
"70547789342647153197139359616031552629"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/df1ba00dd9f64a3ae9a9e05979dfae6a15c7e203",
"signature_type": "Line",
"target": {
"file": "apex/jobscheduler/service/java/com/android/server/job/JobStore.java"
}
},
{
"deprecated": false,
"signature_version": "v1",
"id": "ASB-A-246542285-8a87109e",
"digest": {
"length": 1650.0,
"function_hash": "144351440169903802785837934162513148992"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/df1ba00dd9f64a3ae9a9e05979dfae6a15c7e203",
"signature_type": "Function",
"target": {
"file": "apex/jobscheduler/service/java/com/android/server/job/JobStore.java",
"function": "buildConstraintsFromXml"
}
},
{
"deprecated": false,
"signature_version": "v1",
"id": "ASB-A-246542285-8b0e4875",
"digest": {
"length": 4611.0,
"function_hash": "246742673806852824031168716262510995243"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/df1ba00dd9f64a3ae9a9e05979dfae6a15c7e203",
"signature_type": "Function",
"target": {
"file": "apex/jobscheduler/service/java/com/android/server/job/JobStore.java",
"function": "restoreJobFromXml"
}
},
{
"deprecated": false,
"signature_version": "v1",
"id": "ASB-A-246542285-bb97a6be",
"digest": {
"length": 1112.0,
"function_hash": "63855270129629367971985376108846616096"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/df1ba00dd9f64a3ae9a9e05979dfae6a15c7e203",
"signature_type": "Function",
"target": {
"file": "apex/jobscheduler/service/java/com/android/server/job/JobStore.java",
"function": "run"
}
}
],
"types": [
"DoS"
]
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/7bdc1e8a3affd8534a829744001ef3ea26cce074"
],
"severity": "High",
"spl": "2023-06-01",
"vanir_signatures": [
{
"deprecated": false,
"signature_version": "v1",
"id": "ASB-A-246542285-17576bff",
"digest": {
"length": 1112.0,
"function_hash": "63855270129629367971985376108846616096"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/7bdc1e8a3affd8534a829744001ef3ea26cce074",
"signature_type": "Function",
"target": {
"file": "apex/jobscheduler/service/java/com/android/server/job/JobStore.java",
"function": "run"
}
},
{
"deprecated": false,
"signature_version": "v1",
"id": "ASB-A-246542285-bc110808",
"digest": {
"line_hashes": [
"88748618308055000220281674766198731040",
"249396715037558805745221194740979561064",
"164301605750507272451520189089934655050",
"109795612308487052653223368718562200607",
"155887119447236720631965822184620922830",
"195462494314817103218167905857025189667",
"181057859908330440942386339798719726241",
"55707820669319239591884054813340303362",
"76508389472740143566711447382965763458",
"6036956544649657987674883707972804403",
"185064586106528140455954287194035703738",
"310769436540893605940414805746805545034",
"98497899714125290758167772968008829574"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/7bdc1e8a3affd8534a829744001ef3ea26cce074",
"signature_type": "Line",
"target": {
"file": "apex/jobscheduler/service/java/com/android/server/job/JobStore.java"
}
},
{
"deprecated": false,
"signature_version": "v1",
"id": "ASB-A-246542285-c04594d2",
"digest": {
"length": 4851.0,
"function_hash": "249545300660216615314541107259671027997"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/7bdc1e8a3affd8534a829744001ef3ea26cce074",
"signature_type": "Function",
"target": {
"file": "apex/jobscheduler/service/java/com/android/server/job/JobStore.java",
"function": "restoreJobFromXml"
}
}
],
"types": [
"DoS"
]
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/53522d89c172898ae4ea07533dbc43666cbb1924"
],
"severity": "High",
"spl": "2023-06-01",
"vanir_signatures": [
{
"deprecated": false,
"signature_version": "v1",
"id": "ASB-A-246542285-508a7c1d",
"digest": {
"line_hashes": [
"88748618308055000220281674766198731040",
"249396715037558805745221194740979561064",
"164301605750507272451520189089934655050",
"109795612308487052653223368718562200607",
"155887119447236720631965822184620922830",
"195462494314817103218167905857025189667",
"181057859908330440942386339798719726241",
"55707820669319239591884054813340303362",
"76508389472740143566711447382965763458",
"6036956544649657987674883707972804403",
"185064586106528140455954287194035703738",
"310769436540893605940414805746805545034",
"98497899714125290758167772968008829574"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/53522d89c172898ae4ea07533dbc43666cbb1924",
"signature_type": "Line",
"target": {
"file": "apex/jobscheduler/service/java/com/android/server/job/JobStore.java"
}
},
{
"deprecated": false,
"signature_version": "v1",
"id": "ASB-A-246542285-73ea76b8",
"digest": {
"length": 4851.0,
"function_hash": "249545300660216615314541107259671027997"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/53522d89c172898ae4ea07533dbc43666cbb1924",
"signature_type": "Function",
"target": {
"file": "apex/jobscheduler/service/java/com/android/server/job/JobStore.java",
"function": "restoreJobFromXml"
}
},
{
"deprecated": false,
"signature_version": "v1",
"id": "ASB-A-246542285-e315a8e3",
"digest": {
"length": 1112.0,
"function_hash": "63855270129629367971985376108846616096"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/53522d89c172898ae4ea07533dbc43666cbb1924",
"signature_type": "Function",
"target": {
"file": "apex/jobscheduler/service/java/com/android/server/job/JobStore.java",
"function": "run"
}
}
],
"types": [
"DoS"
]
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/8c8d1c0dfe94f9431bc8094773b2998c9912a629"
],
"severity": "High",
"spl": "2023-06-01",
"vanir_signatures": [
{
"deprecated": false,
"signature_version": "v1",
"id": "ASB-A-246542285-06f5c561",
"digest": {
"length": 1103.0,
"function_hash": "136545259088351736556952524132594636377"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/8c8d1c0dfe94f9431bc8094773b2998c9912a629",
"signature_type": "Function",
"target": {
"file": "apex/jobscheduler/service/java/com/android/server/job/JobStore.java",
"function": "run"
}
},
{
"deprecated": false,
"signature_version": "v1",
"id": "ASB-A-246542285-70ebcf58",
"digest": {
"line_hashes": [
"88748618308055000220281674766198731040",
"249396715037558805745221194740979561064",
"164301605750507272451520189089934655050",
"109795612308487052653223368718562200607",
"155887119447236720631965822184620922830",
"195462494314817103218167905857025189667",
"181057859908330440942386339798719726241",
"55707820669319239591884054813340303362",
"76508389472740143566711447382965763458",
"6036956544649657987674883707972804403",
"185064586106528140455954287194035703738",
"310769436540893605940414805746805545034",
"98497899714125290758167772968008829574"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/8c8d1c0dfe94f9431bc8094773b2998c9912a629",
"signature_type": "Line",
"target": {
"file": "apex/jobscheduler/service/java/com/android/server/job/JobStore.java"
}
},
{
"deprecated": false,
"signature_version": "v1",
"id": "ASB-A-246542285-7736377f",
"digest": {
"length": 5097.0,
"function_hash": "159803640029266232665177633215008020851"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/8c8d1c0dfe94f9431bc8094773b2998c9912a629",
"signature_type": "Function",
"target": {
"file": "apex/jobscheduler/service/java/com/android/server/job/JobStore.java",
"function": "restoreJobFromXml"
}
}
],
"types": [
"DoS"
]
}