Lucene search

K
osvGoogleOSV:ASB-A-336976105
HistorySep 01, 2024 - 12:00 a.m.

App can update key attestation keys of other apps and disable AndroidKeyStore key generation feature permanently.

2024-09-0100:00:00
Google
osv.dev
6
app security
androidkeystore
remoteprovisioningservice
attestation keys
input validation
denial of service

AI Score

6.9

Confidence

High

EPSS

0

Percentile

9.6%

In getRegistration of RemoteProvisioningService.java, there is a possible way to permanently disable the AndroidKeyStore key generation feature by updating the attestation keys of all installed apps due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

AI Score

6.9

Confidence

High

EPSS

0

Percentile

9.6%

Related for OSV:ASB-A-336976105