In getOffsetBeforeAfter of TextLine.java, there is a possible denial of service due to resource exhaustion. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.
{
"types": [
"DoS"
],
"spl": "2021-12-01",
"severity": "Moderate",
"vanir_signatures": [
{
"id": "PUB-A-193849901-2d8a584f",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 1408.0,
"function_hash": "223390943537358684186148273482782980107"
},
"target": {
"function": "getOffsetBeforeAfter",
"file": "core/java/android/text/TextLine.java"
},
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/frameworks/base/+/3582d26e2aee4f4b43238864ff5f41bf8e9c7fb9"
},
{
"id": "PUB-A-193849901-3717620d",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"38073214442450614681091642856483663709",
"120798112187493769443729405617034277899",
"203003597436005622131483406585851092337",
"132847084308367245225299506382699128193"
],
"threshold": 0.9
},
"target": {
"file": "core/java/android/text/TextLine.java"
},
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/frameworks/base/+/3582d26e2aee4f4b43238864ff5f41bf8e9c7fb9"
}
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/3582d26e2aee4f4b43238864ff5f41bf8e9c7fb9"
]
}