ASB-A-316578327

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-316578327.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-316578327
Aliases
  • A-316578327
  • CVE-2024-49736
Published
2025-01-01T00:00:00Z
Modified
2025-02-06T03:15:55Z
Summary
[none]
Details

In onClick of MainClear.java, there is a possible way to trigger factory reset without explicit user consent due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / platform/packages/apps/Settings

Affected ranges

Type
ECOSYSTEM
Events
Introduced
12:0
Fixed
12:2025-01-01

Affected versions

Other

12

Ecosystem specific

{
    "vanir_signatures": [
        {
            "digest": {
                "length": 468.0,
                "function_hash": "238219367729749462361409612188972917943"
            },
            "id": "ASB-A-316578327-70b25216",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/4296cc1977df32e6cf40017dd7393757b8113de8",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/settings/MainClear.java",
                "function": "onClick"
            },
            "signature_type": "Function"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "293007558467642039458582210364392206011",
                    "289091808849620128644474504165159006844",
                    "244055795470219219037351846823488997753",
                    "229113831151245809751461650068035299161",
                    "81121253992461888788413702109990646337",
                    "231304210843202653798050865919198557861",
                    "162901572535076656519065523949107387790",
                    "68905898478925979546211270924781482336",
                    "268815952861988605176323042927693104494",
                    "179767758097661337471283466381504141740",
                    "223976982664577657532191733695736779412",
                    "140732423710052700744296450944898607628",
                    "37415623257390230277324416293682658619",
                    "95570259406272680183246121994355890177",
                    "148185930168826846784182529695800793249"
                ]
            },
            "id": "ASB-A-316578327-e0be3716",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/4296cc1977df32e6cf40017dd7393757b8113de8",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/settings/MainClear.java"
            },
            "signature_type": "Line"
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/Settings/+/4296cc1977df32e6cf40017dd7393757b8113de8"
    ],
    "spl": "2025-01-01",
    "severity": "High",
    "types": [
        "DoS"
    ]
}

Android / platform/packages/apps/Settings

Affected ranges

Type
ECOSYSTEM
Events
Introduced
12L:0
Fixed
12L:2025-01-01

Affected versions

Other

12L

Ecosystem specific

{
    "vanir_signatures": [
        {
            "digest": {
                "length": 468.0,
                "function_hash": "238219367729749462361409612188972917943"
            },
            "id": "ASB-A-316578327-1f693d3f",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/a2741a76cb802603250696e12fc9b9f220355387",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/settings/MainClear.java",
                "function": "onClick"
            },
            "signature_type": "Function"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "293007558467642039458582210364392206011",
                    "289091808849620128644474504165159006844",
                    "244055795470219219037351846823488997753",
                    "229113831151245809751461650068035299161",
                    "81121253992461888788413702109990646337",
                    "231304210843202653798050865919198557861",
                    "162901572535076656519065523949107387790",
                    "68905898478925979546211270924781482336",
                    "268815952861988605176323042927693104494",
                    "179767758097661337471283466381504141740",
                    "223976982664577657532191733695736779412",
                    "140732423710052700744296450944898607628",
                    "37415623257390230277324416293682658619",
                    "95570259406272680183246121994355890177",
                    "148185930168826846784182529695800793249"
                ]
            },
            "id": "ASB-A-316578327-cc538c59",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/a2741a76cb802603250696e12fc9b9f220355387",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/settings/MainClear.java"
            },
            "signature_type": "Line"
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/Settings/+/a2741a76cb802603250696e12fc9b9f220355387"
    ],
    "spl": "2025-01-01",
    "severity": "High",
    "types": [
        "DoS"
    ]
}

Android / platform/packages/apps/Settings

Affected ranges

Type
ECOSYSTEM
Events
Introduced
13:0
Fixed
13:2025-01-01

Affected versions

Other

13

Ecosystem specific

{
    "vanir_signatures": [
        {
            "digest": {
                "length": 468.0,
                "function_hash": "238219367729749462361409612188972917943"
            },
            "id": "ASB-A-316578327-1e45074f",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/d45a07894b5b9193ad6338c7db0cd635f1aa89ef",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/settings/MainClear.java",
                "function": "onClick"
            },
            "signature_type": "Function"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "293007558467642039458582210364392206011",
                    "333567864430983363256812918961253675824",
                    "205738890619021255304653109884398462028",
                    "278215763731535401749319349858411349691",
                    "287438214655150804704505556209191973621",
                    "81121253992461888788413702109990646337",
                    "231304210843202653798050865919198557861",
                    "162901572535076656519065523949107387790",
                    "68905898478925979546211270924781482336",
                    "268815952861988605176323042927693104494",
                    "179767758097661337471283466381504141740",
                    "223976982664577657532191733695736779412",
                    "140732423710052700744296450944898607628",
                    "37415623257390230277324416293682658619",
                    "95570259406272680183246121994355890177",
                    "148185930168826846784182529695800793249"
                ]
            },
            "id": "ASB-A-316578327-6c4ed89f",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/d45a07894b5b9193ad6338c7db0cd635f1aa89ef",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/settings/MainClear.java"
            },
            "signature_type": "Line"
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/Settings/+/d45a07894b5b9193ad6338c7db0cd635f1aa89ef"
    ],
    "spl": "2025-01-01",
    "severity": "High",
    "types": [
        "DoS"
    ]
}

Android / platform/packages/apps/Settings

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2025-01-01

Affected versions

Other

14

Ecosystem specific

{
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "293007558467642039458582210364392206011",
                    "333567864430983363256812918961253675824",
                    "205738890619021255304653109884398462028",
                    "278215763731535401749319349858411349691",
                    "287438214655150804704505556209191973621",
                    "81121253992461888788413702109990646337",
                    "231304210843202653798050865919198557861",
                    "162901572535076656519065523949107387790",
                    "68905898478925979546211270924781482336",
                    "268815952861988605176323042927693104494",
                    "179767758097661337471283466381504141740",
                    "121433494383999291259723708825697763011",
                    "108497356275905548454601910225705641794",
                    "37415623257390230277324416293682658619",
                    "95570259406272680183246121994355890177",
                    "148185930168826846784182529695800793249"
                ]
            },
            "id": "ASB-A-316578327-49f02849",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/15af7d7d5586fd4d9f30ce745679257e12f9c6bc",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/settings/MainClear.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "length": 468.0,
                "function_hash": "238219367729749462361409612188972917943"
            },
            "id": "ASB-A-316578327-f08667f7",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/15af7d7d5586fd4d9f30ce745679257e12f9c6bc",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/settings/MainClear.java",
                "function": "onClick"
            },
            "signature_type": "Function"
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/Settings/+/15af7d7d5586fd4d9f30ce745679257e12f9c6bc"
    ],
    "spl": "2025-01-01",
    "severity": "High",
    "types": [
        "DoS"
    ]
}