In multiple functions of SnoozeHelper.java, there is a possible way to cause a boot loop due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
{ "fixes": [ "https://android.googlesource.com/platform/frameworks/base/+/da6a9ea6deece5b2505d5facdf5d44cfc08057f3" ], "spl": "2024-04-01", "severity": "High", "vanir_signatures": [ { "signature_type": "Line", "source": "https://android.googlesource.com/platform/frameworks/base/+/da6a9ea6deece5b2505d5facdf5d44cfc08057f3", "target": { "file": "services/core/java/com/android/server/notification/SnoozeHelper.java" }, "deprecated": false, "digest": { "threshold": 0.9, "line_hashes": [ "228868492124396178288691891887014316271", "147068199798451416861016451661579915746", "33448550745365142313718789319735457766", "206526065319740046233991815444671678678", "302191840666411036306687304715488847484", "210790450598261481118056802623540896212", "310458183839140372389834523909237394340", "122407183819167912062394090467954374551" ] }, "id": "ASB-A-307948424-143c875a", "signature_version": "v1" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/da6a9ea6deece5b2505d5facdf5d44cfc08057f3", "target": { "function": "canSnooze", "file": "services/core/java/com/android/server/notification/SnoozeHelper.java" }, "deprecated": false, "digest": { "length": 176.0, "function_hash": "292617633439941585308403371346086820032" }, "id": "ASB-A-307948424-43c6f1a8", "signature_version": "v1" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/da6a9ea6deece5b2505d5facdf5d44cfc08057f3", "target": { "function": "repostGroupSummary", "file": "services/core/java/com/android/server/notification/SnoozeHelper.java" }, "deprecated": false, "digest": { "length": 916.0, "function_hash": "47389410036644320751764309263706622974" }, "id": "ASB-A-307948424-57103bbb", "signature_version": "v1" } ], "types": [ "DoS" ] }
{ "fixes": [ "https://android.googlesource.com/platform/frameworks/base/+/ade22bfdf6698cb97b4edc303e8952d6cc1a2f73" ], "spl": "2024-04-01", "severity": "High", "vanir_signatures": [ { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/ade22bfdf6698cb97b4edc303e8952d6cc1a2f73", "target": { "function": "canSnooze", "file": "services/core/java/com/android/server/notification/SnoozeHelper.java" }, "deprecated": false, "digest": { "length": 164.0, "function_hash": "161725677395463373705297395455537278014" }, "id": "ASB-A-307948424-85cd56d5", "signature_version": "v1" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/ade22bfdf6698cb97b4edc303e8952d6cc1a2f73", "target": { "function": "repostGroupSummary", "file": "services/core/java/com/android/server/notification/SnoozeHelper.java" }, "deprecated": false, "digest": { "length": 929.0, "function_hash": "244416773001510046196387697663653877278" }, "id": "ASB-A-307948424-c20176a2", "signature_version": "v1" }, { "signature_type": "Line", "source": "https://android.googlesource.com/platform/frameworks/base/+/ade22bfdf6698cb97b4edc303e8952d6cc1a2f73", "target": { "file": "services/core/java/com/android/server/notification/SnoozeHelper.java" }, "deprecated": false, "digest": { "threshold": 0.9, "line_hashes": [ "331304483198566675242159522780115074989", "274284038018803733519547237122153092709", "104282853574912539123849500631999465886", "51002312730134825191450014297047813747", "240522512309630831697827857464120036961", "63023319149774050960125992398873200987", "250223848882789161417385689122071235195", "92355233782681610718337003745666150372", "37048983232642789480628101857523059563", "77732292769249792439235644689332294803", "288839308734756556288203452729245887105", "265057285360035124000572099202713667399" ] }, "id": "ASB-A-307948424-c527ce63", "signature_version": "v1" } ], "types": [ "DoS" ] }
{ "fixes": [ "https://android.googlesource.com/platform/frameworks/base/+/ade22bfdf6698cb97b4edc303e8952d6cc1a2f73" ], "spl": "2024-04-01", "severity": "High", "vanir_signatures": [ { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/ade22bfdf6698cb97b4edc303e8952d6cc1a2f73", "target": { "function": "canSnooze", "file": "services/core/java/com/android/server/notification/SnoozeHelper.java" }, "deprecated": false, "digest": { "length": 164.0, "function_hash": "161725677395463373705297395455537278014" }, "id": "ASB-A-307948424-691706e7", "signature_version": "v1" }, { "signature_type": "Line", "source": "https://android.googlesource.com/platform/frameworks/base/+/ade22bfdf6698cb97b4edc303e8952d6cc1a2f73", "target": { "file": "services/core/java/com/android/server/notification/SnoozeHelper.java" }, "deprecated": false, "digest": { "threshold": 0.9, "line_hashes": [ "331304483198566675242159522780115074989", "274284038018803733519547237122153092709", "104282853574912539123849500631999465886", "51002312730134825191450014297047813747", "240522512309630831697827857464120036961", "63023319149774050960125992398873200987", "250223848882789161417385689122071235195", "92355233782681610718337003745666150372", "37048983232642789480628101857523059563", "77732292769249792439235644689332294803", "288839308734756556288203452729245887105", "265057285360035124000572099202713667399" ] }, "id": "ASB-A-307948424-6b99e1fc", "signature_version": "v1" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/ade22bfdf6698cb97b4edc303e8952d6cc1a2f73", "target": { "function": "repostGroupSummary", "file": "services/core/java/com/android/server/notification/SnoozeHelper.java" }, "deprecated": false, "digest": { "length": 929.0, "function_hash": "244416773001510046196387697663653877278" }, "id": "ASB-A-307948424-b8474ea4", "signature_version": "v1" } ], "types": [ "DoS" ] }
{ "fixes": [ "https://android.googlesource.com/platform/frameworks/base/+/ade22bfdf6698cb97b4edc303e8952d6cc1a2f73" ], "spl": "2024-04-01", "severity": "High", "vanir_signatures": [ { "signature_type": "Line", "source": "https://android.googlesource.com/platform/frameworks/base/+/ade22bfdf6698cb97b4edc303e8952d6cc1a2f73", "target": { "file": "services/core/java/com/android/server/notification/SnoozeHelper.java" }, "deprecated": false, "digest": { "threshold": 0.9, "line_hashes": [ "331304483198566675242159522780115074989", "274284038018803733519547237122153092709", "104282853574912539123849500631999465886", "51002312730134825191450014297047813747", "240522512309630831697827857464120036961", "63023319149774050960125992398873200987", "250223848882789161417385689122071235195", "92355233782681610718337003745666150372", "37048983232642789480628101857523059563", "77732292769249792439235644689332294803", "288839308734756556288203452729245887105", "265057285360035124000572099202713667399" ] }, "id": "ASB-A-307948424-9b45e6e0", "signature_version": "v1" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/ade22bfdf6698cb97b4edc303e8952d6cc1a2f73", "target": { "function": "canSnooze", "file": "services/core/java/com/android/server/notification/SnoozeHelper.java" }, "deprecated": false, "digest": { "length": 164.0, "function_hash": "161725677395463373705297395455537278014" }, "id": "ASB-A-307948424-b5823434", "signature_version": "v1" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/ade22bfdf6698cb97b4edc303e8952d6cc1a2f73", "target": { "function": "repostGroupSummary", "file": "services/core/java/com/android/server/notification/SnoozeHelper.java" }, "deprecated": false, "digest": { "length": 929.0, "function_hash": "244416773001510046196387697663653877278" }, "id": "ASB-A-307948424-e26f3db9", "signature_version": "v1" } ], "types": [ "DoS" ] }
{ "fixes": [ "https://android.googlesource.com/platform/frameworks/base/+/da6a9ea6deece5b2505d5facdf5d44cfc08057f3" ], "spl": "2024-04-01", "severity": "High", "vanir_signatures": [ { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/da6a9ea6deece5b2505d5facdf5d44cfc08057f3", "target": { "function": "repostGroupSummary", "file": "services/core/java/com/android/server/notification/SnoozeHelper.java" }, "deprecated": false, "digest": { "length": 916.0, "function_hash": "47389410036644320751764309263706622974" }, "id": "ASB-A-307948424-7c68fd33", "signature_version": "v1" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/da6a9ea6deece5b2505d5facdf5d44cfc08057f3", "target": { "function": "canSnooze", "file": "services/core/java/com/android/server/notification/SnoozeHelper.java" }, "deprecated": false, "digest": { "length": 176.0, "function_hash": "292617633439941585308403371346086820032" }, "id": "ASB-A-307948424-bcafc2cb", "signature_version": "v1" }, { "signature_type": "Line", "source": "https://android.googlesource.com/platform/frameworks/base/+/da6a9ea6deece5b2505d5facdf5d44cfc08057f3", "target": { "file": "services/core/java/com/android/server/notification/SnoozeHelper.java" }, "deprecated": false, "digest": { "threshold": 0.9, "line_hashes": [ "228868492124396178288691891887014316271", "147068199798451416861016451661579915746", "33448550745365142313718789319735457766", "206526065319740046233991815444671678678", "302191840666411036306687304715488847484", "210790450598261481118056802623540896212", "310458183839140372389834523909237394340", "122407183819167912062394090467954374551" ] }, "id": "ASB-A-307948424-c6a4ad92", "signature_version": "v1" } ], "types": [ "DoS" ] }