In addNetwork of WifiManager.java, there is a possible way to trigger a persistent DoS due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"vanir_signatures": [
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"291515277085416486699474491138642108863",
"264878087027978662088404428223769486407",
"132233293918702436532845636680667738979",
"10781360971497333638321863174473632205",
"293297158090478303121254787817987641287",
"120516724297911114982956648547773549140",
"332222105730840888445558315720509271967",
"62131073000839779570706535284350195060",
"181422599291394484805713599846954341907",
"227893025107348554982045870643482776885",
"99328059968262538594212846407861350559",
"43365071146086750192861382084578450403",
"80819269854912033180646023273623478888",
"32170999829104299615634451309553921602",
"203680536252585685152395138894844375855",
"180207415084064842451748507395939497919",
"59213861426793363047427397730262897543",
"33129021558188732496004663537698668967",
"275989765722924535300726171223880730513",
"39437489716646572813327417935078088483",
"288923025357870017393329578651837293283",
"256390780362016827934908989831357997981"
]
},
"id": "PUB-A-244713323-281bd3e0",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/efc2010dfb0301b787bab7e2651163b750c14039",
"deprecated": false,
"target": {
"file": "service/java/com/android/server/wifi/WifiConfigManager.java"
},
"signature_version": "v1"
},
{
"id": "PUB-A-244713323-5f6fe5da",
"signature_type": "Function",
"match_only_versions": [
"13"
],
"signature_version": "v1",
"target": {
"function": "removeExcessNetworks",
"file": "service/java/com/android/server/wifi/WifiConfigManager.java"
},
"source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/efc2010dfb0301b787bab7e2651163b750c14039",
"digest": {
"function_hash": "312164666355062670469738263269032068892",
"length": 1312.0
},
"deprecated": false
},
{
"digest": {
"function_hash": "164155133005509604452797655812554789828",
"length": 5514.0
},
"id": "PUB-A-244713323-6746cfb1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/efc2010dfb0301b787bab7e2651163b750c14039",
"deprecated": false,
"target": {
"function": "addOrUpdateNetworkInternal",
"file": "service/java/com/android/server/wifi/WifiConfigManager.java"
},
"signature_version": "v1"
}
],
"types": [
"DoS"
],
"spl": "2023-03-01",
"fixes": [
"https://android.googlesource.com/platform/packages/modules/Wifi/+/efc2010dfb0301b787bab7e2651163b750c14039"
],
"severity": "Moderate"
}