In shouldWrite of OwnersData.java, there is a possible edge case that prevents MDM policies from being persisted due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
{ "severity": "High", "types": [ "DoS" ], "spl": "2024-08-01", "fixes": [ "https://android.googlesource.com/platform/frameworks/base/+/aaa86cdfb79003fd66aae1132b9c06cfe80d7d08" ], "vanir_signatures": [ { "deprecated": false, "target": { "file": "services/devicepolicy/java/com/android/server/devicepolicy/OwnersData.java" }, "match_only_versions": [ "14-next" ], "id": "ASB-A-335232744-3b4b1cb8", "digest": { "threshold": 0.9, "line_hashes": [ "335939561984126118394382399411827842062", "183570889948053597469373294041163375571", "111520062570650909060472410205605243359", "43194311473883171474817995426306700603" ] }, "source": "https://android.googlesource.com/platform/frameworks/base/+/aaa86cdfb79003fd66aae1132b9c06cfe80d7d08", "signature_type": "Line", "signature_version": "v1" }, { "deprecated": false, "target": { "function": "shouldWrite", "file": "services/devicepolicy/java/com/android/server/devicepolicy/OwnersData.java" }, "match_only_versions": [ "14-next" ], "id": "ASB-A-335232744-55f0c25a", "digest": { "function_hash": "107521478979146943489792715445461572053", "length": 124.0 }, "source": "https://android.googlesource.com/platform/frameworks/base/+/aaa86cdfb79003fd66aae1132b9c06cfe80d7d08", "signature_type": "Function", "signature_version": "v1" } ] }
{ "severity": "High", "types": [ "DoS" ], "spl": "2024-08-01", "fixes": [ "https://android.googlesource.com/platform/frameworks/base/+/3abc07421d5bed187589d6deb48da07e4c407203" ], "vanir_signatures": [ { "deprecated": false, "target": { "function": "shouldWrite", "file": "services/devicepolicy/java/com/android/server/devicepolicy/OwnersData.java" }, "match_only_versions": [ "14" ], "id": "ASB-A-335232744-3018424a", "digest": { "function_hash": "107521478979146943489792715445461572053", "length": 124.0 }, "source": "https://android.googlesource.com/platform/frameworks/base/+/3abc07421d5bed187589d6deb48da07e4c407203", "signature_type": "Function", "signature_version": "v1" }, { "deprecated": false, "target": { "file": "services/devicepolicy/java/com/android/server/devicepolicy/OwnersData.java" }, "match_only_versions": [ "14" ], "id": "ASB-A-335232744-b80a7530", "digest": { "threshold": 0.9, "line_hashes": [ "335939561984126118394382399411827842062", "183570889948053597469373294041163375571", "111520062570650909060472410205605243359", "43194311473883171474817995426306700603", "178644015867902978538675744373898029046" ] }, "source": "https://android.googlesource.com/platform/frameworks/base/+/3abc07421d5bed187589d6deb48da07e4c407203", "signature_type": "Line", "signature_version": "v1" } ] }