ASB-A-343714914

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-343714914.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-343714914
Aliases
  • A-343714914
  • CVE-2024-40674
Published
2024-10-01T00:00:00Z
Modified
2026-09-22T15:22:15Z
Summary
[none]
Details

In validateSsid of WifiConfigurationUtil.java, there is a possible way to overflow a system configuration file due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / platform/packages/modules/Wifi

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15-next:0
Fixed
15-next:2024-10-01

Affected versions

Other
15-next

Ecosystem specific

{
    "fixes":  [
        "https://android.googlesource.com/platform/packages/modules/Wifi/+/4a7564305147e97cbd6f8df706c78bf2714eb200"
    ],
    "severity":  "High",
    "spl":  "2024-10-01",
    "types":  [
        "DoS"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "304630350742603747227924041054970377939",
                "length":  863
            },
            "id":  "ASB-A-343714914-3af0779a",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/modules/Wifi/+/4a7564305147e97cbd6f8df706c78bf2714eb200",
            "target":  {
                "file":  "service/java/com/android/server/wifi/WifiConfigurationUtil.java",
                "function":  "validateSsid"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "180320015157445055888254470031308397335",
                    "101410337548891788700638419766590057465",
                    "25529468308696485263562643415171180574",
                    "157191922161539325787533674819705027322",
                    "89573401378529716726799006515409982884",
                    "164788400536831868429565056125099145205",
                    "102515412339309734707169222868232746070",
                    "263427688827028298991592993152744049920",
                    "88121271882137062197457768167531935568",
                    "228664708008654265322614236285537885566",
                    "109272238664494869670511087988499089789",
                    "311384419003616097307884488441507708386"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-343714914-585aec73",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/modules/Wifi/+/4a7564305147e97cbd6f8df706c78bf2714eb200",
            "target":  {
                "file":  "service/java/com/android/server/wifi/WifiConfigurationUtil.java"
            }
        }
    ]
}

Database specific

source
"https://storage.googleapis.com/android-osv/ASB-A-343714914.json"

Android / platform/packages/modules/Wifi

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2024-10-01

Affected versions

Other
14

Ecosystem specific

{
    "fixes":  [
        "https://android.googlesource.com/platform/packages/modules/Wifi/+/3b2ff7586f6961e5f6394b821f926a34942f0f94"
    ],
    "severity":  "High",
    "spl":  "2024-10-01",
    "types":  [
        "DoS"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "180320015157445055888254470031308397335",
                    "101410337548891788700638419766590057465",
                    "25529468308696485263562643415171180574",
                    "157191922161539325787533674819705027322",
                    "89573401378529716726799006515409982884",
                    "164788400536831868429565056125099145205",
                    "102515412339309734707169222868232746070",
                    "263427688827028298991592993152744049920",
                    "88121271882137062197457768167531935568",
                    "228664708008654265322614236285537885566",
                    "109272238664494869670511087988499089789",
                    "311384419003616097307884488441507708386"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-343714914-4e862019",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/modules/Wifi/+/3b2ff7586f6961e5f6394b821f926a34942f0f94",
            "target":  {
                "file":  "service/java/com/android/server/wifi/WifiConfigurationUtil.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "304630350742603747227924041054970377939",
                "length":  863
            },
            "id":  "ASB-A-343714914-ae309e30",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/modules/Wifi/+/3b2ff7586f6961e5f6394b821f926a34942f0f94",
            "target":  {
                "file":  "service/java/com/android/server/wifi/WifiConfigurationUtil.java",
                "function":  "validateSsid"
            }
        }
    ]
}

Database specific

source
"https://storage.googleapis.com/android-osv/ASB-A-343714914.json"