In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.
{
"severity": "Moderate",
"vanir_signatures": [
{
"digest": {
"line_hashes": [
"333909502572637350254575411617029527565",
"71119825256875954793588215558956123656",
"183636523337613638614260686233165493483",
"260757368009967888633462593031057031062"
],
"threshold": 0.9
},
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"id": "PUB-A-246749702-0e4f50d7",
"target": {
"file": "services/core/java/com/android/server/pm/PackageManagerService.java"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/f98c2232a8ea3312cddd202577c25c4436e1afd9"
},
{
"digest": {
"line_hashes": [
"279912400626022739138427290625382397145",
"132826694883517297373598954230676465802",
"121876994837889994575555354132856331238",
"306689344806679354061660248634602379314",
"167720786307100582346939081219941766805",
"53254870991677183784443954544874008036",
"12675648155970293321718287878686190954",
"209025369150670861404556002964603713688"
],
"threshold": 0.9
},
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"id": "PUB-A-246749702-56bb019d",
"target": {
"file": "services/core/java/com/android/server/pm/PreferredActivityHelper.java"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/f98c2232a8ea3312cddd202577c25c4436e1afd9"
},
{
"signature_type": "Line",
"deprecated": false,
"id": "PUB-A-246749702-5d216730",
"digest": {
"line_hashes": [
"185172673667394821057040888178185855686",
"168755391003902483147454097930233846694",
"118359020763303613638789440506146290863",
"254443724483560403493984571636500727978"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/f98c2232a8ea3312cddd202577c25c4436e1afd9",
"signature_version": "v1",
"target": {
"file": "core/java/android/os/PatternMatcher.java"
},
"match_only_versions": [
"13"
]
},
{
"signature_type": "Line",
"deprecated": false,
"id": "PUB-A-246749702-69bd56a6",
"digest": {
"line_hashes": [
"244099178048703686799889249578382494630",
"87757709127002976124648166301533588272",
"263073503298371768976632595349144114364"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/f98c2232a8ea3312cddd202577c25c4436e1afd9",
"signature_version": "v1",
"target": {
"file": "core/java/android/content/IntentFilter.java"
},
"match_only_versions": [
"13"
]
},
{
"digest": {
"length": 950.0,
"function_hash": "233316096577551699801006799542387108229"
},
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"id": "PUB-A-246749702-b5f05252",
"target": {
"file": "services/core/java/com/android/server/pm/PackageManagerService.java",
"function": "addCrossProfileIntentFilter"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/f98c2232a8ea3312cddd202577c25c4436e1afd9"
},
{
"signature_type": "Line",
"deprecated": false,
"id": "PUB-A-246749702-da996657",
"digest": {
"line_hashes": [
"28765179891852124875360932244760138810",
"107881260498526304342166441944131280985",
"320716616228806852363083062970979268624"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/f98c2232a8ea3312cddd202577c25c4436e1afd9",
"signature_version": "v1",
"target": {
"file": "services/core/java/com/android/server/pm/WatchedIntentFilter.java"
},
"match_only_versions": [
"13"
]
},
{
"digest": {
"length": 824.0,
"function_hash": "327553553477137823602492266032538602024"
},
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"id": "PUB-A-246749702-e3ac8b95",
"target": {
"file": "services/core/java/com/android/server/pm/PreferredActivityHelper.java",
"function": "addPersistentPreferredActivity"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/f98c2232a8ea3312cddd202577c25c4436e1afd9"
}
],
"types": [
"DoS"
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/f98c2232a8ea3312cddd202577c25c4436e1afd9"
],
"spl": "2023-03-01"
}