ASB-A-156087409

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-156087409.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-156087409
Aliases
  • A-156087409
  • CVE-2020-0247
Published
2020-08-01T00:00:00Z
Modified
2024-08-07T19:29:04.789822Z
Summary
SystemUI keeps crashing after setting wallpaper
Details

In Threshold::getHistogram of ImageProcessHelper.java, there is a possible crash loop due to an uncaught exception. This could lead to local denial of service with User execution privileges needed. User interaction is needed for exploitation.

References

Affected packages

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
8.0:0
Fixed
8.0:2020-08-01

Affected versions

8.*

8.0

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "172260931148576283508502282930086536287",
                    "69762119069934583538150944477062063644",
                    "41788209591480995343599634629871276831",
                    "206968977824076241877853040457269759372",
                    "326525929080557567519001109057930205169",
                    "164910111290914432699794303549929867816",
                    "178157768945384015450149964697896740726",
                    "73414202330073951450347636173102404077",
                    "279461491752877701018903146720756939835",
                    "23239281096636916967595080502995361158",
                    "15548221547238923445524989901820729827",
                    "108595916678578282602218670410662378036"
                ]
            },
            "id": "ASB-A-156087409-023455cf",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/4d467f1c7d7d355d0ac71a12ec8c2df07f756046",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "packages/SystemUI/src/com/android/systemui/glwallpaper/ImageGLWallpaper.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "length": 544.0,
                "function_hash": "164056971811273129981778420265352160951"
            },
            "id": "ASB-A-156087409-0d1c9cda",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/4d467f1c7d7d355d0ac71a12ec8c2df07f756046",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "packages/SystemUI/src/com/android/systemui/glwallpaper/ImageGLWallpaper.java",
                "function": "setupTexture"
            },
            "signature_type": "Function"
        },
        {
            "digest": {
                "length": 385.0,
                "function_hash": "223063371253574149007117641398441725620"
            },
            "id": "ASB-A-156087409-622b49ca",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/4d467f1c7d7d355d0ac71a12ec8c2df07f756046",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "packages/SystemUI/src/com/android/systemui/glwallpaper/ImageProcessHelper.java",
                "function": "toGrayscale"
            },
            "signature_type": "Function"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "146300149699477825008823799645957678832",
                    "234345092561006495441846688986047312641",
                    "294260020192796777473674563879224907018",
                    "177470060885181306498828198811489643335",
                    "122642257004972993641766446087570019445",
                    "33566425180851759401497121244069608413",
                    "5725491801484050306998555613500153594",
                    "265905230549412327255711043576225241185"
                ]
            },
            "id": "ASB-A-156087409-7ebeb076",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/4d467f1c7d7d355d0ac71a12ec8c2df07f756046",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "packages/SystemUI/src/com/android/systemui/glwallpaper/ImageProcessHelper.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "length": 227.0,
                "function_hash": "154171055084584259847909281917439675666"
            },
            "id": "ASB-A-156087409-ec2a255b",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/4d467f1c7d7d355d0ac71a12ec8c2df07f756046",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "packages/SystemUI/src/com/android/systemui/glwallpaper/ImageProcessHelper.java",
                "function": "doInBackground"
            },
            "signature_type": "Function"
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/4d467f1c7d7d355d0ac71a12ec8c2df07f756046"
    ],
    "spl": "2020-08-01",
    "severity": "High",
    "types": [
        "DoS"
    ]
}

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
8.1:0
Fixed
8.1:2020-08-01

Affected versions

8.*

8.1

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "172260931148576283508502282930086536287",
                    "69762119069934583538150944477062063644",
                    "41788209591480995343599634629871276831",
                    "206968977824076241877853040457269759372",
                    "326525929080557567519001109057930205169",
                    "164910111290914432699794303549929867816",
                    "178157768945384015450149964697896740726",
                    "73414202330073951450347636173102404077",
                    "279461491752877701018903146720756939835",
                    "23239281096636916967595080502995361158",
                    "15548221547238923445524989901820729827",
                    "108595916678578282602218670410662378036"
                ]
            },
            "id": "ASB-A-156087409-10e968af",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/4d467f1c7d7d355d0ac71a12ec8c2df07f756046",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "packages/SystemUI/src/com/android/systemui/glwallpaper/ImageGLWallpaper.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "length": 544.0,
                "function_hash": "164056971811273129981778420265352160951"
            },
            "id": "ASB-A-156087409-1cc6ae50",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/4d467f1c7d7d355d0ac71a12ec8c2df07f756046",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "packages/SystemUI/src/com/android/systemui/glwallpaper/ImageGLWallpaper.java",
                "function": "setupTexture"
            },
            "signature_type": "Function"
        },
        {
            "digest": {
                "length": 385.0,
                "function_hash": "223063371253574149007117641398441725620"
            },
            "id": "ASB-A-156087409-70130112",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/4d467f1c7d7d355d0ac71a12ec8c2df07f756046",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "packages/SystemUI/src/com/android/systemui/glwallpaper/ImageProcessHelper.java",
                "function": "toGrayscale"
            },
            "signature_type": "Function"
        },
        {
            "digest": {
                "length": 227.0,
                "function_hash": "154171055084584259847909281917439675666"
            },
            "id": "ASB-A-156087409-c63e9230",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/4d467f1c7d7d355d0ac71a12ec8c2df07f756046",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "packages/SystemUI/src/com/android/systemui/glwallpaper/ImageProcessHelper.java",
                "function": "doInBackground"
            },
            "signature_type": "Function"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "146300149699477825008823799645957678832",
                    "234345092561006495441846688986047312641",
                    "294260020192796777473674563879224907018",
                    "177470060885181306498828198811489643335",
                    "122642257004972993641766446087570019445",
                    "33566425180851759401497121244069608413",
                    "5725491801484050306998555613500153594",
                    "265905230549412327255711043576225241185"
                ]
            },
            "id": "ASB-A-156087409-d469d53f",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/4d467f1c7d7d355d0ac71a12ec8c2df07f756046",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "packages/SystemUI/src/com/android/systemui/glwallpaper/ImageProcessHelper.java"
            },
            "signature_type": "Line"
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/4d467f1c7d7d355d0ac71a12ec8c2df07f756046"
    ],
    "spl": "2020-08-01",
    "severity": "High",
    "types": [
        "DoS"
    ]
}

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
10:0
Fixed
10:2020-08-01

Affected versions

Other

10

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "length": 385.0,
                "function_hash": "223063371253574149007117641398441725620"
            },
            "id": "ASB-A-156087409-03c4889c",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/4d467f1c7d7d355d0ac71a12ec8c2df07f756046",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "packages/SystemUI/src/com/android/systemui/glwallpaper/ImageProcessHelper.java",
                "function": "toGrayscale"
            },
            "signature_type": "Function"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "172260931148576283508502282930086536287",
                    "69762119069934583538150944477062063644",
                    "41788209591480995343599634629871276831",
                    "206968977824076241877853040457269759372",
                    "326525929080557567519001109057930205169",
                    "164910111290914432699794303549929867816",
                    "178157768945384015450149964697896740726",
                    "73414202330073951450347636173102404077",
                    "279461491752877701018903146720756939835",
                    "23239281096636916967595080502995361158",
                    "15548221547238923445524989901820729827",
                    "108595916678578282602218670410662378036"
                ]
            },
            "id": "ASB-A-156087409-28bf4ac7",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/4d467f1c7d7d355d0ac71a12ec8c2df07f756046",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "packages/SystemUI/src/com/android/systemui/glwallpaper/ImageGLWallpaper.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "146300149699477825008823799645957678832",
                    "234345092561006495441846688986047312641",
                    "294260020192796777473674563879224907018",
                    "177470060885181306498828198811489643335",
                    "122642257004972993641766446087570019445",
                    "33566425180851759401497121244069608413",
                    "5725491801484050306998555613500153594",
                    "265905230549412327255711043576225241185"
                ]
            },
            "id": "ASB-A-156087409-77780d66",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/4d467f1c7d7d355d0ac71a12ec8c2df07f756046",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "packages/SystemUI/src/com/android/systemui/glwallpaper/ImageProcessHelper.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "length": 227.0,
                "function_hash": "154171055084584259847909281917439675666"
            },
            "id": "ASB-A-156087409-bb27b17d",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/4d467f1c7d7d355d0ac71a12ec8c2df07f756046",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "packages/SystemUI/src/com/android/systemui/glwallpaper/ImageProcessHelper.java",
                "function": "doInBackground"
            },
            "signature_type": "Function"
        },
        {
            "digest": {
                "length": 544.0,
                "function_hash": "164056971811273129981778420265352160951"
            },
            "id": "ASB-A-156087409-fbef8337",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/4d467f1c7d7d355d0ac71a12ec8c2df07f756046",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "packages/SystemUI/src/com/android/systemui/glwallpaper/ImageGLWallpaper.java",
                "function": "setupTexture"
            },
            "signature_type": "Function"
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/4d467f1c7d7d355d0ac71a12ec8c2df07f756046"
    ],
    "spl": "2020-08-01",
    "severity": "High",
    "types": [
        "DoS"
    ]
}