In validateIpConfiguration of WifiConfigurationUtil.java, there is a possible way to trigger a permanent DoS due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
{ "vanir_signatures": [ { "match_only_versions": [ "15-next" ], "digest": { "length": 533.0, "function_hash": "268970976256462892695824881419809576680" }, "id": "ASB-A-349550024-02dbdc45", "source": "https://googleplex-android.googlesource.com/platform/packages/modules/Wifi/+/57e446cfdc95fce61be986d98ffc81e8bb70504a", "deprecated": false, "signature_version": "v1", "target": { "file": "service/java/com/android/server/wifi/WifiConfigurationUtil.java", "function": "validateIpConfiguration" }, "signature_type": "Function" }, { "match_only_versions": [ "15-next" ], "digest": { "threshold": 0.9, "line_hashes": [ "157729514090136750614922102444868695211", "153223806101060587384917427341007894121", "6169354125247250972893225869952520317", "149175955344299535851433614057880762320", "283644712432518933007983254855582186844", "292297759700568290400317367960813353772", "215930143921313685355631054354498779599", "236446643928738427244331876479116847229", "62678524712933812997686960367221923736", "127112364178185815869358305186094565305", "240522512309630831697827857464120036961", "63023319149774050960125992398873200987" ] }, "id": "ASB-A-349550024-896a4aa3", "source": "https://googleplex-android.googlesource.com/platform/packages/modules/Wifi/+/57e446cfdc95fce61be986d98ffc81e8bb70504a", "deprecated": false, "signature_version": "v1", "target": { "file": "service/java/com/android/server/wifi/WifiConfigurationUtil.java" }, "signature_type": "Line" } ], "fixes": [ "https://android.googlesource.com/platform/packages/modules/Wifi/+/57e446cfdc95fce61be986d98ffc81e8bb70504a" ], "spl": "2025-05-01", "severity": "High", "types": [ "EoP" ] }
{ "vanir_signatures": [ { "match_only_versions": [ "15" ], "digest": { "threshold": 0.9, "line_hashes": [ "157729514090136750614922102444868695211", "153223806101060587384917427341007894121", "6169354125247250972893225869952520317", "149175955344299535851433614057880762320", "283644712432518933007983254855582186844", "292297759700568290400317367960813353772", "215930143921313685355631054354498779599", "236446643928738427244331876479116847229", "62678524712933812997686960367221923736", "127112364178185815869358305186094565305", "240522512309630831697827857464120036961", "63023319149774050960125992398873200987" ] }, "id": "ASB-A-349550024-97a91f59", "source": "https://googleplex-android.googlesource.com/platform/packages/modules/Wifi/+/68e46661e2deb32b41527a02030cd928bee07409", "deprecated": false, "signature_version": "v1", "target": { "file": "service/java/com/android/server/wifi/WifiConfigurationUtil.java" }, "signature_type": "Line" }, { "match_only_versions": [ "15" ], "digest": { "length": 533.0, "function_hash": "268970976256462892695824881419809576680" }, "id": "ASB-A-349550024-bfe3642f", "source": "https://googleplex-android.googlesource.com/platform/packages/modules/Wifi/+/68e46661e2deb32b41527a02030cd928bee07409", "deprecated": false, "signature_version": "v1", "target": { "file": "service/java/com/android/server/wifi/WifiConfigurationUtil.java", "function": "validateIpConfiguration" }, "signature_type": "Function" } ], "fixes": [ "https://android.googlesource.com/platform/packages/modules/Wifi/+/68e46661e2deb32b41527a02030cd928bee07409" ], "spl": "2025-05-01", "severity": "High", "types": [ "EoP" ] }
{ "vanir_signatures": [ { "match_only_versions": [ "13" ], "digest": { "threshold": 0.9, "line_hashes": [ "157729514090136750614922102444868695211", "153223806101060587384917427341007894121", "6169354125247250972893225869952520317", "149175955344299535851433614057880762320", "283644712432518933007983254855582186844", "292297759700568290400317367960813353772", "215930143921313685355631054354498779599", "236446643928738427244331876479116847229", "62678524712933812997686960367221923736", "127112364178185815869358305186094565305", "240522512309630831697827857464120036961", "63023319149774050960125992398873200987" ] }, "id": "ASB-A-349550024-f56ab511", "source": "https://googleplex-android.googlesource.com/platform/packages/modules/Wifi/+/28f7312aaed8fe503a7b929832712889d0f36e91", "deprecated": false, "signature_version": "v1", "target": { "file": "service/java/com/android/server/wifi/WifiConfigurationUtil.java" }, "signature_type": "Line" }, { "match_only_versions": [ "13" ], "digest": { "length": 533.0, "function_hash": "268970976256462892695824881419809576680" }, "id": "ASB-A-349550024-fd5b13c3", "source": "https://googleplex-android.googlesource.com/platform/packages/modules/Wifi/+/28f7312aaed8fe503a7b929832712889d0f36e91", "deprecated": false, "signature_version": "v1", "target": { "file": "service/java/com/android/server/wifi/WifiConfigurationUtil.java", "function": "validateIpConfiguration" }, "signature_type": "Function" } ], "fixes": [ "https://android.googlesource.com/platform/packages/modules/Wifi/+/28f7312aaed8fe503a7b929832712889d0f36e91" ], "spl": "2025-05-01", "severity": "High", "types": [ "EoP" ] }
{ "vanir_signatures": [ { "match_only_versions": [ "14" ], "digest": { "length": 533.0, "function_hash": "268970976256462892695824881419809576680" }, "id": "ASB-A-349550024-ea71a7bc", "source": "https://googleplex-android.googlesource.com/platform/packages/modules/Wifi/+/a7b08b4051be9b2e986a8f5686528b31e9c31723", "deprecated": false, "signature_version": "v1", "target": { "file": "service/java/com/android/server/wifi/WifiConfigurationUtil.java", "function": "validateIpConfiguration" }, "signature_type": "Function" }, { "match_only_versions": [ "14" ], "digest": { "threshold": 0.9, "line_hashes": [ "157729514090136750614922102444868695211", "153223806101060587384917427341007894121", "6169354125247250972893225869952520317", "149175955344299535851433614057880762320", "283644712432518933007983254855582186844", "292297759700568290400317367960813353772", "215930143921313685355631054354498779599", "236446643928738427244331876479116847229", "62678524712933812997686960367221923736", "127112364178185815869358305186094565305", "240522512309630831697827857464120036961", "63023319149774050960125992398873200987" ] }, "id": "ASB-A-349550024-ff5e515d", "source": "https://googleplex-android.googlesource.com/platform/packages/modules/Wifi/+/a7b08b4051be9b2e986a8f5686528b31e9c31723", "deprecated": false, "signature_version": "v1", "target": { "file": "service/java/com/android/server/wifi/WifiConfigurationUtil.java" }, "signature_type": "Line" } ], "fixes": [ "https://android.googlesource.com/platform/packages/modules/Wifi/+/a7b08b4051be9b2e986a8f5686528b31e9c31723" ], "spl": "2025-05-01", "severity": "High", "types": [ "EoP" ] }