ASB-A-345881518

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-345881518.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-345881518
Aliases
  • A-345881518
  • CVE-2024-49735
Published
2025-01-01T00:00:00Z
Modified
2025-01-13T21:12:09.224408Z
Summary
[none]
Details

In multiple locations, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15-next:0
Fixed
15-next:2025-01-01

Affected versions

Other

15-next

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "match_only_versions": [
                "15-next"
            ],
            "digest": {
                "length": 1891.0,
                "function_hash": "314311721901029165748630872850297738725"
            },
            "id": "ASB-A-345881518-27a117ff",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/1181fd1b6769e6f093cd409e2b9f7aa0f91d7ed9",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "core/java/android/app/NotificationChannel.java",
                "function": "NotificationChannel"
            },
            "signature_type": "Function"
        },
        {
            "match_only_versions": [
                "15-next"
            ],
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "102590458425482841714714556130064461254",
                    "198263291824474883455281500439886984705",
                    "112757600119388172295681446587787161657",
                    "93052882448048158902761720945002496609",
                    "88408364532948866847194171120372312692",
                    "321328801335597420302827537829088603700",
                    "191128075015172664078238430017319350690",
                    "46647168552672946774034575295472596928",
                    "250328234990283768947485818120820329731",
                    "10258427076513515905278969389984710651",
                    "6325003243973696147249990074626494003",
                    "66308639026502231053428236912788309401",
                    "288830354773030477805363382573064367803",
                    "162602360402049085412612526519474426510",
                    "221915910814306309042982343014049608897",
                    "215480220299881883965722609175216200101",
                    "338014032870276221016266635535525924656",
                    "204247701177459667385787766171237813235",
                    "174437839800096773124482249368293077208",
                    "282860941078822924740446478771327188826",
                    "333716579091286286679674179522992996830",
                    "2664370363649679681512571926016417510",
                    "330760075125554946080357207360795511505",
                    "43626782874463229372168790560415808690",
                    "164524839754432288034929076271652236605",
                    "146951008059873727085607661751008250330",
                    "122314213531755661158058798418715416329",
                    "249446470169117098854071570937439734209"
                ]
            },
            "id": "ASB-A-345881518-5e99c260",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/1181fd1b6769e6f093cd409e2b9f7aa0f91d7ed9",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "core/java/android/app/NotificationChannel.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "length": 419.0,
                "function_hash": "97679127887895531719756018273258138595"
            },
            "id": "ASB-A-345881518-9ecdcfc4",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/4db9092ad1d099f75726367544bb8949fdb79c2f",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "core/java/android/app/NotificationChannel.java",
                "function": "setVibrationEffect"
            },
            "signature_type": "Function"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "157793381605987312042493553028526666520",
                    "98847074837018968024182251145523661245",
                    "51481884126834068115892203486765335697",
                    "252639615815655140563620068064852136040",
                    "145891262197097887295601165897301436852",
                    "257469980841961436937913449681595196682",
                    "239677873288859462717242370074584068348",
                    "298661890760187496711902080301617980032"
                ]
            },
            "id": "ASB-A-345881518-c19ad785",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/4db9092ad1d099f75726367544bb8949fdb79c2f",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "core/java/android/app/NotificationChannel.java"
            },
            "signature_type": "Line"
        },
        {
            "match_only_versions": [
                "15-next"
            ],
            "digest": {
                "length": 342.0,
                "function_hash": "207683270952768602517895269440255571699"
            },
            "id": "ASB-A-345881518-d2748f2a",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/1181fd1b6769e6f093cd409e2b9f7aa0f91d7ed9",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "core/java/android/app/NotificationChannel.java",
                "function": "setVibrationPattern"
            },
            "signature_type": "Function"
        },
        {
            "match_only_versions": [
                "15-next"
            ],
            "digest": {
                "length": 195.0,
                "function_hash": "26177914239344014112605870630408674776"
            },
            "id": "ASB-A-345881518-d8712075",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/1181fd1b6769e6f093cd409e2b9f7aa0f91d7ed9",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "core/java/android/app/NotificationChannel.java",
                "function": "setVibrationEffect"
            },
            "signature_type": "Function"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "294625532310257454393692929018175241844",
                    "68985356413066642058895451997344018",
                    "92299732114857159876166326756287292479",
                    "339135950617160300061289269117376126023",
                    "337610674675784829361602315238942602610",
                    "132739438979823377423481477096485116729",
                    "96505241456916937588720894441302998850",
                    "303028484206841825598370297059385325874",
                    "100551905050195245040270674553074037721"
                ]
            },
            "id": "ASB-A-345881518-d921e5e9",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/1181fd1b6769e6f093cd409e2b9f7aa0f91d7ed9",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "core/java/android/os/VibrationEffect.java"
            },
            "signature_type": "Line"
        },
        {
            "match_only_versions": [
                "15-next"
            ],
            "digest": {
                "length": 2899.0,
                "function_hash": "156912425565507303124845706949328557891"
            },
            "id": "ASB-A-345881518-dc8bdc2b",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/1181fd1b6769e6f093cd409e2b9f7aa0f91d7ed9",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "core/java/android/app/NotificationChannel.java",
                "function": "writeXml"
            },
            "signature_type": "Function"
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/1181fd1b6769e6f093cd409e2b9f7aa0f91d7ed9",
        "https://android.googlesource.com/platform/frameworks/base/+/4db9092ad1d099f75726367544bb8949fdb79c2f"
    ],
    "spl": "2025-01-01",
    "severity": "High",
    "types": [
        "EoP"
    ]
}