Lucene search

K
osvGoogleOSV:ASB-A-304983146
HistoryApr 01, 2024 - 12:00 a.m.

Permanent device denial of service due to improper input validation in AppOpsService

2024-04-0100:00:00
Google
osv.dev
27
appopsservice
input validation
denial of service
resource exhaustion
appops_accesses.xml

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

In multiple functions of AppOpsService.java, there is a possible way to saturate the content of /data/system/appops_accesses.xml due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

Related for OSV:ASB-A-304983146