ASB-A-372678095

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-372678095.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-372678095
Aliases
Published
2025-05-01T00:00:00Z
Modified
2026-04-17T15:55:28.020024Z
Summary
[none]
Details

In collectOps of AppOpsService.java, there is a possible way to cause permanent DoS due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15-next:0
Fixed
15-next:2025-05-01

Affected versions

Other
15-next

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "length": 809.0,
                "function_hash": "337851167433459298967354477856127863738"
            },
            "id": "ASB-A-372678095-3de71318",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/eec34e2716bfa613be30b0a0b9a173e2005a6c00",
            "target": {
                "function": "collectOps",
                "file": "services/core/java/com/android/server/appop/AppOpsService.java"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "71952651776487346660823485887614510747",
                    "115918072684645835693082267120199065287",
                    "278258228105977721164706192820564684914",
                    "198485944586267716548559390678997654625",
                    "172218190940938305218596134347684931315",
                    "236517670561950720737636693102508756842",
                    "184464620630367572333039989042782175192",
                    "236206418025131006374802593789565846969",
                    "247831937926152626931044641286737104696",
                    "217477771717466271752611718701508366803",
                    "241109627515707857017823944220942304205",
                    "236206418025131006374802593789565846969",
                    "247831937926152626931044641286737104696",
                    "69030975499120734252832411346976782828",
                    "334579910967147542961837984257354475710",
                    "170951001934090677966517865211278506298",
                    "97555979122857469897748567592303905125",
                    "160642358394123752445688812791315287382"
                ]
            },
            "id": "ASB-A-372678095-47b1a736",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/eec34e2716bfa613be30b0a0b9a173e2005a6c00",
            "target": {
                "file": "services/core/java/com/android/server/appop/AppOpsService.java"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/eec34e2716bfa613be30b0a0b9a173e2005a6c00"
    ],
    "types": [
        "DoS"
    ],
    "spl": "2025-05-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-372678095.json"

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2025-05-01

Affected versions

Other
15

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "71952651776487346660823485887614510747",
                    "115918072684645835693082267120199065287",
                    "278258228105977721164706192820564684914",
                    "198485944586267716548559390678997654625",
                    "172218190940938305218596134347684931315",
                    "236517670561950720737636693102508756842",
                    "184464620630367572333039989042782175192",
                    "236206418025131006374802593789565846969",
                    "247831937926152626931044641286737104696",
                    "217477771717466271752611718701508366803",
                    "241109627515707857017823944220942304205",
                    "236206418025131006374802593789565846969",
                    "247831937926152626931044641286737104696",
                    "69030975499120734252832411346976782828",
                    "334579910967147542961837984257354475710",
                    "170951001934090677966517865211278506298",
                    "97555979122857469897748567592303905125",
                    "160642358394123752445688812791315287382"
                ]
            },
            "id": "ASB-A-372678095-2166cc00",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/767b4f7c3657fa29548a4464da6790dbca8aebda",
            "target": {
                "file": "services/core/java/com/android/server/appop/AppOpsService.java"
            }
        },
        {
            "digest": {
                "length": 809.0,
                "function_hash": "337851167433459298967354477856127863738"
            },
            "id": "ASB-A-372678095-c2f03341",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/767b4f7c3657fa29548a4464da6790dbca8aebda",
            "target": {
                "function": "collectOps",
                "file": "services/core/java/com/android/server/appop/AppOpsService.java"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/767b4f7c3657fa29548a4464da6790dbca8aebda"
    ],
    "types": [
        "DoS"
    ],
    "spl": "2025-05-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-372678095.json"

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
13:0
Fixed
13:2025-05-01

Affected versions

Other
13

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "length": 838.0,
                "function_hash": "115722328755242842571934418617486325501"
            },
            "id": "ASB-A-372678095-7b085345",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/8e7990cecce808d9dd9465bb8526211b0086e881",
            "target": {
                "function": "collectOps",
                "file": "services/core/java/com/android/server/appop/AppOpsService.java"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "239171083149991810069156845449762651941",
                    "332699549677386690953477719385212091116",
                    "205564394585243236353206476146237353732",
                    "198485944586267716548559390678997654625",
                    "172218190940938305218596134347684931315",
                    "236517670561950720737636693102508756842",
                    "184464620630367572333039989042782175192",
                    "312127215108962139457798752153198999495",
                    "157527308637125204989989890482974640699",
                    "45266889576682936642418812902781308146",
                    "253772115497832552708570951606569109011",
                    "264990296039589826285566544685433618275",
                    "322082137789406113131651207645207994143",
                    "215423790674367581878210316172652184642",
                    "179512474220682230527776989648646180959",
                    "170951001934090677966517865211278506298",
                    "97555979122857469897748567592303905125",
                    "160642358394123752445688812791315287382"
                ]
            },
            "id": "ASB-A-372678095-b9dd8c82",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/8e7990cecce808d9dd9465bb8526211b0086e881",
            "target": {
                "file": "services/core/java/com/android/server/appop/AppOpsService.java"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/8e7990cecce808d9dd9465bb8526211b0086e881"
    ],
    "types": [
        "DoS"
    ],
    "spl": "2025-05-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-372678095.json"

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2025-05-01

Affected versions

Other
14

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "length": 779.0,
                "function_hash": "54244223092258252841458286859193254355"
            },
            "id": "ASB-A-372678095-914ef889",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/b0fb67bb0c3523fd0c59b76e83e356ea244c276b",
            "target": {
                "function": "collectOps",
                "file": "services/core/java/com/android/server/appop/AppOpsService.java"
            }
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "55029505406583542871309047594599843770",
                    "62436470753535400835099673739506981236",
                    "251169751863556473748939695500833632328",
                    "198485944586267716548559390678997654625",
                    "172218190940938305218596134347684931315",
                    "236517670561950720737636693102508756842",
                    "184464620630367572333039989042782175192",
                    "158892665326766544084637425482934174952",
                    "337473101324785300981722906924860473506",
                    "250649295467920369279721726719756952339",
                    "259143427029110884523456883122189804226",
                    "289059269598020453562879917806168574476",
                    "173065293936839409610542187442158767219",
                    "88877441754748984667401630493882754800",
                    "106233699318394501404791780087749942113",
                    "170951001934090677966517865211278506298",
                    "97555979122857469897748567592303905125",
                    "160642358394123752445688812791315287382"
                ]
            },
            "id": "ASB-A-372678095-cf1baa87",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/b0fb67bb0c3523fd0c59b76e83e356ea244c276b",
            "target": {
                "file": "services/core/java/com/android/server/appop/AppOpsService.java"
            }
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/b0fb67bb0c3523fd0c59b76e83e356ea244c276b"
    ],
    "types": [
        "DoS"
    ],
    "spl": "2025-05-01",
    "severity": "High"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-372678095.json"