In addNetwork of WifiManager.java, there is a possible way to trigger a persistent DoS due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
{ "vanir_signatures": [ { "digest": { "threshold": 0.9, "line_hashes": [ "291515277085416486699474491138642108863", "264878087027978662088404428223769486407", "132233293918702436532845636680667738979", "10781360971497333638321863174473632205", "293297158090478303121254787817987641287", "120516724297911114982956648547773549140", "332222105730840888445558315720509271967", "62131073000839779570706535284350195060", "181422599291394484805713599846954341907", "227893025107348554982045870643482776885", "99328059968262538594212846407861350559", "43365071146086750192861382084578450403", "80819269854912033180646023273623478888", "32170999829104299615634451309553921602", "203680536252585685152395138894844375855", "180207415084064842451748507395939497919", "59213861426793363047427397730262897543", "33129021558188732496004663537698668967", "275989765722924535300726171223880730513", "39437489716646572813327417935078088483", "288923025357870017393329578651837293283", "256390780362016827934908989831357997981" ] }, "id": "PUB-A-244713323-281bd3e0", "source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/efc2010dfb0301b787bab7e2651163b750c14039", "deprecated": false, "signature_version": "v1", "target": { "file": "service/java/com/android/server/wifi/WifiConfigManager.java" }, "signature_type": "Line" }, { "match_only_versions": [ "13" ], "digest": { "length": 1312.0, "function_hash": "312164666355062670469738263269032068892" }, "id": "PUB-A-244713323-5f6fe5da", "source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/efc2010dfb0301b787bab7e2651163b750c14039", "deprecated": false, "signature_version": "v1", "target": { "file": "service/java/com/android/server/wifi/WifiConfigManager.java", "function": "removeExcessNetworks" }, "signature_type": "Function" }, { "digest": { "length": 5514.0, "function_hash": "164155133005509604452797655812554789828" }, "id": "PUB-A-244713323-6746cfb1", "source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/efc2010dfb0301b787bab7e2651163b750c14039", "deprecated": false, "signature_version": "v1", "target": { "file": "service/java/com/android/server/wifi/WifiConfigManager.java", "function": "addOrUpdateNetworkInternal" }, "signature_type": "Function" } ], "fixes": [ "https://android.googlesource.com/platform/packages/modules/Wifi/+/efc2010dfb0301b787bab7e2651163b750c14039" ], "spl": "2023-03-01", "severity": "Moderate", "types": [ "DoS" ] }