In onClick of MainClear.java, there is a possible way to trigger factory reset without explicit user consent due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"types": [
"DoS"
],
"spl": "2025-01-01",
"vanir_signatures": [
{
"signature_type": "Function",
"digest": {
"function_hash": "238219367729749462361409612188972917943",
"length": 468.0
},
"target": {
"file": "src/com/android/settings/MainClear.java",
"function": "onClick"
},
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/4296cc1977df32e6cf40017dd7393757b8113de8",
"id": "ASB-A-316578327-70b25216",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"293007558467642039458582210364392206011",
"289091808849620128644474504165159006844",
"244055795470219219037351846823488997753",
"229113831151245809751461650068035299161",
"81121253992461888788413702109990646337",
"231304210843202653798050865919198557861",
"162901572535076656519065523949107387790",
"68905898478925979546211270924781482336",
"268815952861988605176323042927693104494",
"179767758097661337471283466381504141740",
"223976982664577657532191733695736779412",
"140732423710052700744296450944898607628",
"37415623257390230277324416293682658619",
"95570259406272680183246121994355890177",
"148185930168826846784182529695800793249"
]
},
"target": {
"file": "src/com/android/settings/MainClear.java"
},
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/4296cc1977df32e6cf40017dd7393757b8113de8",
"id": "ASB-A-316578327-e0be3716",
"deprecated": false,
"signature_version": "v1"
}
],
"fixes": [
"https://android.googlesource.com/platform/packages/apps/Settings/+/4296cc1977df32e6cf40017dd7393757b8113de8"
],
"severity": "High"
}{
"types": [
"DoS"
],
"spl": "2025-01-01",
"vanir_signatures": [
{
"signature_type": "Function",
"digest": {
"function_hash": "238219367729749462361409612188972917943",
"length": 468.0
},
"target": {
"file": "src/com/android/settings/MainClear.java",
"function": "onClick"
},
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/a2741a76cb802603250696e12fc9b9f220355387",
"id": "ASB-A-316578327-1f693d3f",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"293007558467642039458582210364392206011",
"289091808849620128644474504165159006844",
"244055795470219219037351846823488997753",
"229113831151245809751461650068035299161",
"81121253992461888788413702109990646337",
"231304210843202653798050865919198557861",
"162901572535076656519065523949107387790",
"68905898478925979546211270924781482336",
"268815952861988605176323042927693104494",
"179767758097661337471283466381504141740",
"223976982664577657532191733695736779412",
"140732423710052700744296450944898607628",
"37415623257390230277324416293682658619",
"95570259406272680183246121994355890177",
"148185930168826846784182529695800793249"
]
},
"target": {
"file": "src/com/android/settings/MainClear.java"
},
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/a2741a76cb802603250696e12fc9b9f220355387",
"id": "ASB-A-316578327-cc538c59",
"deprecated": false,
"signature_version": "v1"
}
],
"fixes": [
"https://android.googlesource.com/platform/packages/apps/Settings/+/a2741a76cb802603250696e12fc9b9f220355387"
],
"severity": "High"
}{
"types": [
"DoS"
],
"spl": "2025-01-01",
"vanir_signatures": [
{
"signature_type": "Function",
"digest": {
"function_hash": "238219367729749462361409612188972917943",
"length": 468.0
},
"target": {
"file": "src/com/android/settings/MainClear.java",
"function": "onClick"
},
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/d45a07894b5b9193ad6338c7db0cd635f1aa89ef",
"id": "ASB-A-316578327-1e45074f",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"293007558467642039458582210364392206011",
"333567864430983363256812918961253675824",
"205738890619021255304653109884398462028",
"278215763731535401749319349858411349691",
"287438214655150804704505556209191973621",
"81121253992461888788413702109990646337",
"231304210843202653798050865919198557861",
"162901572535076656519065523949107387790",
"68905898478925979546211270924781482336",
"268815952861988605176323042927693104494",
"179767758097661337471283466381504141740",
"223976982664577657532191733695736779412",
"140732423710052700744296450944898607628",
"37415623257390230277324416293682658619",
"95570259406272680183246121994355890177",
"148185930168826846784182529695800793249"
]
},
"target": {
"file": "src/com/android/settings/MainClear.java"
},
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/d45a07894b5b9193ad6338c7db0cd635f1aa89ef",
"id": "ASB-A-316578327-6c4ed89f",
"deprecated": false,
"signature_version": "v1"
}
],
"fixes": [
"https://android.googlesource.com/platform/packages/apps/Settings/+/d45a07894b5b9193ad6338c7db0cd635f1aa89ef"
],
"severity": "High"
}{
"types": [
"DoS"
],
"spl": "2025-01-01",
"vanir_signatures": [
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"293007558467642039458582210364392206011",
"333567864430983363256812918961253675824",
"205738890619021255304653109884398462028",
"278215763731535401749319349858411349691",
"287438214655150804704505556209191973621",
"81121253992461888788413702109990646337",
"231304210843202653798050865919198557861",
"162901572535076656519065523949107387790",
"68905898478925979546211270924781482336",
"268815952861988605176323042927693104494",
"179767758097661337471283466381504141740",
"121433494383999291259723708825697763011",
"108497356275905548454601910225705641794",
"37415623257390230277324416293682658619",
"95570259406272680183246121994355890177",
"148185930168826846784182529695800793249"
]
},
"target": {
"file": "src/com/android/settings/MainClear.java"
},
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/15af7d7d5586fd4d9f30ce745679257e12f9c6bc",
"id": "ASB-A-316578327-49f02849",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "238219367729749462361409612188972917943",
"length": 468.0
},
"target": {
"file": "src/com/android/settings/MainClear.java",
"function": "onClick"
},
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/15af7d7d5586fd4d9f30ce745679257e12f9c6bc",
"id": "ASB-A-316578327-f08667f7",
"deprecated": false,
"signature_version": "v1"
}
],
"fixes": [
"https://android.googlesource.com/platform/packages/apps/Settings/+/15af7d7d5586fd4d9f30ce745679257e12f9c6bc"
],
"severity": "High"
}