ASB-A-353240784

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-353240784.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-353240784
Aliases
  • A-353240784
  • CVE-2024-49741
Published
2025-02-01T00:00:00Z
Modified
2026-07-10T15:26:01.587957612Z
Summary
[none]
Details

In multiple functions of AppWidgetServiceImpl.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15-next:0
Fixed
15-next:2025-02-01

Affected versions

Other
15-next

Ecosystem specific 

{
    "types": [
        "DoS"
    ],
    "spl": "2025-02-01",
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/2a75f7166b028150ea0dcd142e1ede51f7861eb3"
    ],
    "severity": "High",
    "vanir_signatures": [
        {
            "id": "ASB-A-353240784-0152b3cb",
            "signature_version": "v1",
            "target": {
                "function": "addWidgetLocked",
                "file": "services/appwidget/java/com/android/server/appwidget/AppWidgetServiceImpl.java"
            },
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/2a75f7166b028150ea0dcd142e1ede51f7861eb3",
            "deprecated": false,
            "digest": {
                "function_hash": "313074325466655676605280082003931912522",
                "length": 161.0
            }
        },
        {
            "target": {
                "file": "services/appwidget/java/com/android/server/appwidget/AppWidgetServiceImpl.java"
            },
            "digest": {
                "line_hashes": [
                    "43660311435050050382585709688577068910",
                    "249166140986559321077548608660934337398",
                    "176847376872299565086656419121846343674",
                    "292127994250651398085576693283002556842",
                    "152093235544016367693216882584062469565",
                    "338584562536628185485155354524247262212",
                    "146558060028963139949552267019298110709",
                    "306475899467813990873324024789627674929",
                    "190908955396158493842810401007871176533",
                    "291944613433444395747628010033278973879",
                    "53946197292873515220494566900644792093",
                    "108569194531739758682395031162813005925",
                    "271189872651345310267853221934700829339",
                    "56504929098059580404229757205624245119",
                    "162813657391936699187481290415675509414",
                    "331806954779022005328842488207777814155"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-353240784-9016c52e",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/2a75f7166b028150ea0dcd142e1ede51f7861eb3",
            "deprecated": false,
            "signature_version": "v1"
        },
        {
            "target": {
                "function": "lookupOrAddHostLocked",
                "file": "services/appwidget/java/com/android/server/appwidget/AppWidgetServiceImpl.java"
            },
            "digest": {
                "function_hash": "338833729122539342226944422414438834946",
                "length": 188.0
            },
            "id": "ASB-A-353240784-93e0c6b9",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/2a75f7166b028150ea0dcd142e1ede51f7861eb3",
            "deprecated": false,
            "signature_version": "v1"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-353240784.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
12:0
Fixed
12:2025-02-01

Affected versions

Other
12

Ecosystem specific 

{
    "types": [
        "DoS"
    ],
    "spl": "2025-02-01",
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/ae39a3f6538e5a5a73aea4daf8b552539247227f"
    ],
    "severity": "High",
    "vanir_signatures": [
        {
            "id": "ASB-A-353240784-4d40dbc2",
            "digest": {
                "function_hash": "338833729122539342226944422414438834946",
                "length": 188.0
            },
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/ae39a3f6538e5a5a73aea4daf8b552539247227f",
            "deprecated": false,
            "target": {
                "function": "lookupOrAddHostLocked",
                "file": "services/appwidget/java/com/android/server/appwidget/AppWidgetServiceImpl.java"
            }
        },
        {
            "id": "ASB-A-353240784-70219d21",
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "211590665497380367345155028601456721461",
                    "231540159592474288835799657838345877532",
                    "293648522360674287502560728971125563905",
                    "292127994250651398085576693283002556842",
                    "152093235544016367693216882584062469565",
                    "338584562536628185485155354524247262212",
                    "146558060028963139949552267019298110709",
                    "24850561231269811359171541611754208496",
                    "183635004074158899654250592193679815457",
                    "130019227301112430451192012308933469636",
                    "298915705645368639483367808759128057794",
                    "99805317381656089202650213620896393240",
                    "111733263802058129537726324760934853232",
                    "56504929098059580404229757205624245119",
                    "162813657391936699187481290415675509414",
                    "331806954779022005328842488207777814155"
                ]
            },
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/ae39a3f6538e5a5a73aea4daf8b552539247227f",
            "deprecated": false,
            "target": {
                "file": "services/appwidget/java/com/android/server/appwidget/AppWidgetServiceImpl.java"
            }
        },
        {
            "id": "ASB-A-353240784-db090208",
            "digest": {
                "function_hash": "114202538221393693435860937290887524294",
                "length": 87.0
            },
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/ae39a3f6538e5a5a73aea4daf8b552539247227f",
            "deprecated": false,
            "target": {
                "function": "addWidgetLocked",
                "file": "services/appwidget/java/com/android/server/appwidget/AppWidgetServiceImpl.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-353240784.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
12L:0
Fixed
12L:2025-02-01

Affected versions

Other
12L

Ecosystem specific 

{
    "types": [
        "DoS"
    ],
    "spl": "2025-02-01",
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/ae39a3f6538e5a5a73aea4daf8b552539247227f"
    ],
    "severity": "High",
    "vanir_signatures": [
        {
            "target": {
                "file": "services/appwidget/java/com/android/server/appwidget/AppWidgetServiceImpl.java"
            },
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "211590665497380367345155028601456721461",
                    "231540159592474288835799657838345877532",
                    "293648522360674287502560728971125563905",
                    "292127994250651398085576693283002556842",
                    "152093235544016367693216882584062469565",
                    "338584562536628185485155354524247262212",
                    "146558060028963139949552267019298110709",
                    "24850561231269811359171541611754208496",
                    "183635004074158899654250592193679815457",
                    "130019227301112430451192012308933469636",
                    "298915705645368639483367808759128057794",
                    "99805317381656089202650213620896393240",
                    "111733263802058129537726324760934853232",
                    "56504929098059580404229757205624245119",
                    "162813657391936699187481290415675509414",
                    "331806954779022005328842488207777814155"
                ]
            },
            "id": "ASB-A-353240784-15ce8c48",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/ae39a3f6538e5a5a73aea4daf8b552539247227f",
            "deprecated": false,
            "signature_version": "v1"
        },
        {
            "id": "ASB-A-353240784-327b5ebc",
            "digest": {
                "function_hash": "114202538221393693435860937290887524294",
                "length": 87.0
            },
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/ae39a3f6538e5a5a73aea4daf8b552539247227f",
            "deprecated": false,
            "target": {
                "function": "addWidgetLocked",
                "file": "services/appwidget/java/com/android/server/appwidget/AppWidgetServiceImpl.java"
            }
        },
        {
            "id": "ASB-A-353240784-4592d2de",
            "digest": {
                "function_hash": "338833729122539342226944422414438834946",
                "length": 188.0
            },
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/ae39a3f6538e5a5a73aea4daf8b552539247227f",
            "deprecated": false,
            "target": {
                "function": "lookupOrAddHostLocked",
                "file": "services/appwidget/java/com/android/server/appwidget/AppWidgetServiceImpl.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-353240784.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2025-02-01

Affected versions

Other
15

Ecosystem specific 

{
    "types": [
        "DoS"
    ],
    "spl": "2025-02-01",
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/1baa20c05661c8489e50693ec15f6c011cc72c18"
    ],
    "severity": "High",
    "vanir_signatures": [
        {
            "target": {
                "function": "lookupOrAddHostLocked",
                "file": "services/appwidget/java/com/android/server/appwidget/AppWidgetServiceImpl.java"
            },
            "signature_version": "v1",
            "digest": {
                "function_hash": "338833729122539342226944422414438834946",
                "length": 188.0
            },
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/1baa20c05661c8489e50693ec15f6c011cc72c18",
            "deprecated": false,
            "id": "ASB-A-353240784-05e49e59"
        },
        {
            "id": "ASB-A-353240784-41fd1fa6",
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "43660311435050050382585709688577068910",
                    "249166140986559321077548608660934337398",
                    "176847376872299565086656419121846343674",
                    "292127994250651398085576693283002556842",
                    "152093235544016367693216882584062469565",
                    "338584562536628185485155354524247262212",
                    "146558060028963139949552267019298110709",
                    "306475899467813990873324024789627674929",
                    "190908955396158493842810401007871176533",
                    "291944613433444395747628010033278973879",
                    "53946197292873515220494566900644792093",
                    "108569194531739758682395031162813005925",
                    "271189872651345310267853221934700829339",
                    "56504929098059580404229757205624245119",
                    "162813657391936699187481290415675509414",
                    "331806954779022005328842488207777814155"
                ]
            },
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/1baa20c05661c8489e50693ec15f6c011cc72c18",
            "deprecated": false,
            "target": {
                "file": "services/appwidget/java/com/android/server/appwidget/AppWidgetServiceImpl.java"
            }
        },
        {
            "target": {
                "function": "addWidgetLocked",
                "file": "services/appwidget/java/com/android/server/appwidget/AppWidgetServiceImpl.java"
            },
            "signature_version": "v1",
            "digest": {
                "function_hash": "313074325466655676605280082003931912522",
                "length": 161.0
            },
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/1baa20c05661c8489e50693ec15f6c011cc72c18",
            "deprecated": false,
            "id": "ASB-A-353240784-fa89b4a7"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-353240784.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
13:0
Fixed
13:2025-02-01

Affected versions

Other
13

Ecosystem specific 

{
    "types": [
        "DoS"
    ],
    "spl": "2025-02-01",
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/ae39a3f6538e5a5a73aea4daf8b552539247227f"
    ],
    "severity": "High",
    "vanir_signatures": [
        {
            "id": "ASB-A-353240784-16a5c279",
            "digest": {
                "line_hashes": [
                    "211590665497380367345155028601456721461",
                    "231540159592474288835799657838345877532",
                    "293648522360674287502560728971125563905",
                    "292127994250651398085576693283002556842",
                    "152093235544016367693216882584062469565",
                    "338584562536628185485155354524247262212",
                    "146558060028963139949552267019298110709",
                    "24850561231269811359171541611754208496",
                    "183635004074158899654250592193679815457",
                    "130019227301112430451192012308933469636",
                    "298915705645368639483367808759128057794",
                    "99805317381656089202650213620896393240",
                    "111733263802058129537726324760934853232",
                    "56504929098059580404229757205624245119",
                    "162813657391936699187481290415675509414",
                    "331806954779022005328842488207777814155"
                ],
                "threshold": 0.9
            },
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/ae39a3f6538e5a5a73aea4daf8b552539247227f",
            "deprecated": false,
            "target": {
                "file": "services/appwidget/java/com/android/server/appwidget/AppWidgetServiceImpl.java"
            }
        },
        {
            "id": "ASB-A-353240784-7b051940",
            "digest": {
                "function_hash": "338833729122539342226944422414438834946",
                "length": 188.0
            },
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/ae39a3f6538e5a5a73aea4daf8b552539247227f",
            "deprecated": false,
            "target": {
                "function": "lookupOrAddHostLocked",
                "file": "services/appwidget/java/com/android/server/appwidget/AppWidgetServiceImpl.java"
            }
        },
        {
            "target": {
                "function": "addWidgetLocked",
                "file": "services/appwidget/java/com/android/server/appwidget/AppWidgetServiceImpl.java"
            },
            "signature_version": "v1",
            "digest": {
                "function_hash": "114202538221393693435860937290887524294",
                "length": 87.0
            },
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/ae39a3f6538e5a5a73aea4daf8b552539247227f",
            "deprecated": false,
            "id": "ASB-A-353240784-87231162"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-353240784.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2025-02-01

Affected versions

Other
14

Ecosystem specific 

{
    "types": [
        "DoS"
    ],
    "spl": "2025-02-01",
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/ae39a3f6538e5a5a73aea4daf8b552539247227f"
    ],
    "severity": "High",
    "vanir_signatures": [
        {
            "id": "ASB-A-353240784-1e7752b7",
            "digest": {
                "function_hash": "114202538221393693435860937290887524294",
                "length": 87.0
            },
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/ae39a3f6538e5a5a73aea4daf8b552539247227f",
            "deprecated": false,
            "target": {
                "function": "addWidgetLocked",
                "file": "services/appwidget/java/com/android/server/appwidget/AppWidgetServiceImpl.java"
            }
        },
        {
            "id": "ASB-A-353240784-8f5b1113",
            "digest": {
                "line_hashes": [
                    "211590665497380367345155028601456721461",
                    "231540159592474288835799657838345877532",
                    "293648522360674287502560728971125563905",
                    "292127994250651398085576693283002556842",
                    "152093235544016367693216882584062469565",
                    "338584562536628185485155354524247262212",
                    "146558060028963139949552267019298110709",
                    "24850561231269811359171541611754208496",
                    "183635004074158899654250592193679815457",
                    "130019227301112430451192012308933469636",
                    "298915705645368639483367808759128057794",
                    "99805317381656089202650213620896393240",
                    "111733263802058129537726324760934853232",
                    "56504929098059580404229757205624245119",
                    "162813657391936699187481290415675509414",
                    "331806954779022005328842488207777814155"
                ],
                "threshold": 0.9
            },
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/ae39a3f6538e5a5a73aea4daf8b552539247227f",
            "deprecated": false,
            "target": {
                "file": "services/appwidget/java/com/android/server/appwidget/AppWidgetServiceImpl.java"
            }
        },
        {
            "id": "ASB-A-353240784-a1e0ce61",
            "signature_version": "v1",
            "target": {
                "function": "lookupOrAddHostLocked",
                "file": "services/appwidget/java/com/android/server/appwidget/AppWidgetServiceImpl.java"
            },
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/ae39a3f6538e5a5a73aea4daf8b552539247227f",
            "deprecated": false,
            "digest": {
                "function_hash": "338833729122539342226944422414438834946",
                "length": 188.0
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-353240784.json"