Local PDoS by setting large wallpapers with setStream

2022-05-0100:00:00

Google

osv.dev

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

In setStream of WallpaperManager.java, there is a possible way to cause a permanent DoS due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.

CPENameOperatorVersion
platform/frameworks/baseeq12
platform/frameworks/baseeq12L

CPE	Name	Operator	Version
	platform/frameworks/base	eq	12
	platform/frameworks/base	eq	12L

References

android.googlesource.com/platform/frameworks/base/+/b1b01433f5b8dc0702c0e1abde5f7b86b708a849

source.android.com/security/bulletin/2022-05-01