In shouldWrite of OwnersData.java, there is a possible edge case that prevents MDM policies from being persisted due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"spl": "2024-08-01",
"vanir_signatures": [
{
"id": "ASB-A-335232744-3b4b1cb8",
"deprecated": false,
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"335939561984126118394382399411827842062",
"183570889948053597469373294041163375571",
"111520062570650909060472410205605243359",
"43194311473883171474817995426306700603"
]
},
"match_only_versions": [
"14-next"
],
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/aaa86cdfb79003fd66aae1132b9c06cfe80d7d08",
"target": {
"file": "services/devicepolicy/java/com/android/server/devicepolicy/OwnersData.java"
}
},
{
"id": "ASB-A-335232744-55f0c25a",
"deprecated": false,
"signature_type": "Function",
"digest": {
"function_hash": "107521478979146943489792715445461572053",
"length": 124.0
},
"match_only_versions": [
"14-next"
],
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/aaa86cdfb79003fd66aae1132b9c06cfe80d7d08",
"target": {
"file": "services/devicepolicy/java/com/android/server/devicepolicy/OwnersData.java",
"function": "shouldWrite"
}
}
],
"severity": "High",
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/aaa86cdfb79003fd66aae1132b9c06cfe80d7d08"
],
"types": [
"DoS"
]
}
{
"spl": "2024-08-01",
"vanir_signatures": [
{
"id": "ASB-A-335232744-3018424a",
"deprecated": false,
"signature_type": "Function",
"digest": {
"function_hash": "107521478979146943489792715445461572053",
"length": 124.0
},
"match_only_versions": [
"14"
],
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/3abc07421d5bed187589d6deb48da07e4c407203",
"target": {
"file": "services/devicepolicy/java/com/android/server/devicepolicy/OwnersData.java",
"function": "shouldWrite"
}
},
{
"id": "ASB-A-335232744-b80a7530",
"deprecated": false,
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"335939561984126118394382399411827842062",
"183570889948053597469373294041163375571",
"111520062570650909060472410205605243359",
"43194311473883171474817995426306700603",
"178644015867902978538675744373898029046"
]
},
"match_only_versions": [
"14"
],
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/3abc07421d5bed187589d6deb48da07e4c407203",
"target": {
"file": "services/devicepolicy/java/com/android/server/devicepolicy/OwnersData.java"
}
}
],
"severity": "High",
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/3abc07421d5bed187589d6deb48da07e4c407203"
],
"types": [
"DoS"
]
}