Lucene search

GoogleOSV:ASB-A-234441463

HistoryNov 01, 2022 - 12:00 a.m.

The "snoozeNotification" method of NotificationListenerService causes Android system to crash and cyclic reboot.

2022-11-0100:00:00

Google

osv.dev

notificationlistenerservice

alarmmanagerservice

android system

uncaught exceptions

cyclic reboots

denial of service

local exploitation

user interaction

software vulnerabilities

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

In setImpl of AlarmManagerService.java, there is a possible way to put a device into a boot loop due to an uncaught exception. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

CPENameOperatorVersion
platform/frameworks/baseeq12
platform/frameworks/baseeq12L
platform/frameworks/baseeq11
platform/frameworks/baseeq10
platform/frameworks/baseeq13

Name	Operator	Version
platform/frameworks/base	eq	12
platform/frameworks/base	eq	12L
platform/frameworks/base	eq	11
platform/frameworks/base	eq	10
platform/frameworks/base	eq	13

References

android.googlesource.com/platform/frameworks/base/+/31c837747ff1f9529b6780fb6e5ef724963e9ff0

android.googlesource.com/platform/frameworks/base/+/cf5893107728c328716350d9edb9b0d587fc3a46

source.android.com/security/bulletin/2022-11-01

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for OSV:ASB-A-234441463