In shouldWrite of OwnersData.java, there is a possible edge case that prevents MDM policies from being persisted due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
{ "spl": "2024-08-01", "severity": "High", "fixes": [ "https://android.googlesource.com/platform/frameworks/base/+/aaa86cdfb79003fd66aae1132b9c06cfe80d7d08" ], "vanir_signatures": [ { "signature_version": "v1", "target": { "file": "services/devicepolicy/java/com/android/server/devicepolicy/OwnersData.java" }, "digest": { "line_hashes": [ "335939561984126118394382399411827842062", "183570889948053597469373294041163375571", "111520062570650909060472410205605243359", "43194311473883171474817995426306700603" ], "threshold": 0.9 }, "signature_type": "Line", "source": "https://android.googlesource.com/platform/frameworks/base/+/aaa86cdfb79003fd66aae1132b9c06cfe80d7d08", "id": "ASB-A-335232744-3b4b1cb8", "match_only_versions": [ "14-next" ], "deprecated": false }, { "signature_version": "v1", "target": { "function": "shouldWrite", "file": "services/devicepolicy/java/com/android/server/devicepolicy/OwnersData.java" }, "digest": { "length": 124.0, "function_hash": "107521478979146943489792715445461572053" }, "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/aaa86cdfb79003fd66aae1132b9c06cfe80d7d08", "id": "ASB-A-335232744-55f0c25a", "match_only_versions": [ "14-next" ], "deprecated": false } ], "types": [ "DoS" ] }
{ "spl": "2024-08-01", "severity": "High", "fixes": [ "https://android.googlesource.com/platform/frameworks/base/+/3abc07421d5bed187589d6deb48da07e4c407203" ], "vanir_signatures": [ { "signature_version": "v1", "target": { "function": "shouldWrite", "file": "services/devicepolicy/java/com/android/server/devicepolicy/OwnersData.java" }, "digest": { "length": 124.0, "function_hash": "107521478979146943489792715445461572053" }, "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/3abc07421d5bed187589d6deb48da07e4c407203", "id": "ASB-A-335232744-3018424a", "match_only_versions": [ "14" ], "deprecated": false }, { "signature_version": "v1", "target": { "file": "services/devicepolicy/java/com/android/server/devicepolicy/OwnersData.java" }, "digest": { "line_hashes": [ "335939561984126118394382399411827842062", "183570889948053597469373294041163375571", "111520062570650909060472410205605243359", "43194311473883171474817995426306700603", "178644015867902978538675744373898029046" ], "threshold": 0.9 }, "signature_type": "Line", "source": "https://android.googlesource.com/platform/frameworks/base/+/3abc07421d5bed187589d6deb48da07e4c407203", "id": "ASB-A-335232744-b80a7530", "match_only_versions": [ "14" ], "deprecated": false } ], "types": [ "DoS" ] }