In multiple functions of SnoozeHelper.java, there is a possible way to cause a boot loop due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"severity": "High",
"spl": "2024-04-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"228868492124396178288691891887014316271",
"147068199798451416861016451661579915746",
"33448550745365142313718789319735457766",
"206526065319740046233991815444671678678",
"302191840666411036306687304715488847484",
"210790450598261481118056802623540896212",
"310458183839140372389834523909237394340",
"122407183819167912062394090467954374551"
]
},
"target": {
"file": "services/core/java/com/android/server/notification/SnoozeHelper.java"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/da6a9ea6deece5b2505d5facdf5d44cfc08057f3",
"deprecated": false,
"id": "ASB-A-307948424-143c875a",
"signature_type": "Line"
},
{
"signature_version": "v1",
"digest": {
"length": 176.0,
"function_hash": "292617633439941585308403371346086820032"
},
"target": {
"file": "services/core/java/com/android/server/notification/SnoozeHelper.java",
"function": "canSnooze"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/da6a9ea6deece5b2505d5facdf5d44cfc08057f3",
"deprecated": false,
"id": "ASB-A-307948424-43c6f1a8",
"signature_type": "Function"
},
{
"signature_version": "v1",
"digest": {
"length": 916.0,
"function_hash": "47389410036644320751764309263706622974"
},
"target": {
"file": "services/core/java/com/android/server/notification/SnoozeHelper.java",
"function": "repostGroupSummary"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/da6a9ea6deece5b2505d5facdf5d44cfc08057f3",
"deprecated": false,
"id": "ASB-A-307948424-57103bbb",
"signature_type": "Function"
}
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/da6a9ea6deece5b2505d5facdf5d44cfc08057f3"
]
}{
"severity": "High",
"spl": "2024-04-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"signature_version": "v1",
"digest": {
"length": 164.0,
"function_hash": "161725677395463373705297395455537278014"
},
"target": {
"file": "services/core/java/com/android/server/notification/SnoozeHelper.java",
"function": "canSnooze"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/ade22bfdf6698cb97b4edc303e8952d6cc1a2f73",
"deprecated": false,
"id": "ASB-A-307948424-85cd56d5",
"signature_type": "Function"
},
{
"signature_version": "v1",
"digest": {
"length": 929.0,
"function_hash": "244416773001510046196387697663653877278"
},
"target": {
"file": "services/core/java/com/android/server/notification/SnoozeHelper.java",
"function": "repostGroupSummary"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/ade22bfdf6698cb97b4edc303e8952d6cc1a2f73",
"deprecated": false,
"id": "ASB-A-307948424-c20176a2",
"signature_type": "Function"
},
{
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"331304483198566675242159522780115074989",
"274284038018803733519547237122153092709",
"104282853574912539123849500631999465886",
"51002312730134825191450014297047813747",
"240522512309630831697827857464120036961",
"63023319149774050960125992398873200987",
"250223848882789161417385689122071235195",
"92355233782681610718337003745666150372",
"37048983232642789480628101857523059563",
"77732292769249792439235644689332294803",
"288839308734756556288203452729245887105",
"265057285360035124000572099202713667399"
]
},
"target": {
"file": "services/core/java/com/android/server/notification/SnoozeHelper.java"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/ade22bfdf6698cb97b4edc303e8952d6cc1a2f73",
"deprecated": false,
"id": "ASB-A-307948424-c527ce63",
"signature_type": "Line"
}
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/ade22bfdf6698cb97b4edc303e8952d6cc1a2f73"
]
}{
"severity": "High",
"spl": "2024-04-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"signature_version": "v1",
"digest": {
"length": 164.0,
"function_hash": "161725677395463373705297395455537278014"
},
"target": {
"file": "services/core/java/com/android/server/notification/SnoozeHelper.java",
"function": "canSnooze"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/ade22bfdf6698cb97b4edc303e8952d6cc1a2f73",
"deprecated": false,
"id": "ASB-A-307948424-691706e7",
"signature_type": "Function"
},
{
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"331304483198566675242159522780115074989",
"274284038018803733519547237122153092709",
"104282853574912539123849500631999465886",
"51002312730134825191450014297047813747",
"240522512309630831697827857464120036961",
"63023319149774050960125992398873200987",
"250223848882789161417385689122071235195",
"92355233782681610718337003745666150372",
"37048983232642789480628101857523059563",
"77732292769249792439235644689332294803",
"288839308734756556288203452729245887105",
"265057285360035124000572099202713667399"
]
},
"target": {
"file": "services/core/java/com/android/server/notification/SnoozeHelper.java"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/ade22bfdf6698cb97b4edc303e8952d6cc1a2f73",
"deprecated": false,
"id": "ASB-A-307948424-6b99e1fc",
"signature_type": "Line"
},
{
"signature_version": "v1",
"digest": {
"length": 929.0,
"function_hash": "244416773001510046196387697663653877278"
},
"target": {
"file": "services/core/java/com/android/server/notification/SnoozeHelper.java",
"function": "repostGroupSummary"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/ade22bfdf6698cb97b4edc303e8952d6cc1a2f73",
"deprecated": false,
"id": "ASB-A-307948424-b8474ea4",
"signature_type": "Function"
}
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/ade22bfdf6698cb97b4edc303e8952d6cc1a2f73"
]
}{
"severity": "High",
"spl": "2024-04-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"331304483198566675242159522780115074989",
"274284038018803733519547237122153092709",
"104282853574912539123849500631999465886",
"51002312730134825191450014297047813747",
"240522512309630831697827857464120036961",
"63023319149774050960125992398873200987",
"250223848882789161417385689122071235195",
"92355233782681610718337003745666150372",
"37048983232642789480628101857523059563",
"77732292769249792439235644689332294803",
"288839308734756556288203452729245887105",
"265057285360035124000572099202713667399"
]
},
"target": {
"file": "services/core/java/com/android/server/notification/SnoozeHelper.java"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/ade22bfdf6698cb97b4edc303e8952d6cc1a2f73",
"deprecated": false,
"id": "ASB-A-307948424-9b45e6e0",
"signature_type": "Line"
},
{
"signature_version": "v1",
"digest": {
"length": 164.0,
"function_hash": "161725677395463373705297395455537278014"
},
"target": {
"file": "services/core/java/com/android/server/notification/SnoozeHelper.java",
"function": "canSnooze"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/ade22bfdf6698cb97b4edc303e8952d6cc1a2f73",
"deprecated": false,
"id": "ASB-A-307948424-b5823434",
"signature_type": "Function"
},
{
"signature_version": "v1",
"digest": {
"length": 929.0,
"function_hash": "244416773001510046196387697663653877278"
},
"target": {
"file": "services/core/java/com/android/server/notification/SnoozeHelper.java",
"function": "repostGroupSummary"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/ade22bfdf6698cb97b4edc303e8952d6cc1a2f73",
"deprecated": false,
"id": "ASB-A-307948424-e26f3db9",
"signature_type": "Function"
}
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/ade22bfdf6698cb97b4edc303e8952d6cc1a2f73"
]
}{
"severity": "High",
"spl": "2024-04-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"signature_version": "v1",
"digest": {
"length": 916.0,
"function_hash": "47389410036644320751764309263706622974"
},
"target": {
"file": "services/core/java/com/android/server/notification/SnoozeHelper.java",
"function": "repostGroupSummary"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/da6a9ea6deece5b2505d5facdf5d44cfc08057f3",
"deprecated": false,
"id": "ASB-A-307948424-7c68fd33",
"signature_type": "Function"
},
{
"signature_version": "v1",
"digest": {
"length": 176.0,
"function_hash": "292617633439941585308403371346086820032"
},
"target": {
"file": "services/core/java/com/android/server/notification/SnoozeHelper.java",
"function": "canSnooze"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/da6a9ea6deece5b2505d5facdf5d44cfc08057f3",
"deprecated": false,
"id": "ASB-A-307948424-bcafc2cb",
"signature_type": "Function"
},
{
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"228868492124396178288691891887014316271",
"147068199798451416861016451661579915746",
"33448550745365142313718789319735457766",
"206526065319740046233991815444671678678",
"302191840666411036306687304715488847484",
"210790450598261481118056802623540896212",
"310458183839140372389834523909237394340",
"122407183819167912062394090467954374551"
]
},
"target": {
"file": "services/core/java/com/android/server/notification/SnoozeHelper.java"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/da6a9ea6deece5b2505d5facdf5d44cfc08057f3",
"deprecated": false,
"id": "ASB-A-307948424-c6a4ad92",
"signature_type": "Line"
}
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/da6a9ea6deece5b2505d5facdf5d44cfc08057f3"
]
}