{"id":"ASB-A-156260178","details":"In SystemSettingsValidators, there is a possible permanent denial of service due to missing bounds checks on UI settings. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-156260178","CVE-2021-0338"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2021-02-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2021-02-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/459f6cbe7537b1ba0b88b96c44099bc897c1bcc8"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/edeb081ad8b22b4a32ff90610f9f06182025e41c"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2021-02-01"}]}],"versions":["10"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/9af8c6364f34c7d7be6c6dff23d3b7052c0a914d"],"severity":"High","spl":"2021-02-01","types":["DoS"],"vanir_signatures":[{"deprecated":false,"digest":{"line_hashes":["223335318938469518514426245447269022788","57640350119750408815849764577241693968","188541251490836277355070719114386292828","71992009000569554972012370457541178099","227815405439443887615219270422784671254","278336947106054212457390456237733707848","198326124730402711151032827429121598672","265324216888424422881601950607023274360","336824082160175114097742888306958115358","35361513993377667144037176944940776463","310683188912784393686044503234209267756","73191886621207884001845459534189687069","201580910959343343568664026600799026420"],"threshold":0.9},"id":"ASB-A-156260178-7109ffe4","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/9af8c6364f34c7d7be6c6dff23d3b7052c0a914d","target":{"file":"core/java/android/provider/Settings.java"}},{"target":{"file":"core/java/android/provider/Settings.java","function":"validate"},"deprecated":false,"digest":{"length":170,"function_hash":"284531671753312080076594849960250499167"},"id":"ASB-A-156260178-7b7cd244","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/9af8c6364f34c7d7be6c6dff23d3b7052c0a914d"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-156260178.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2021-02-01"}]}],"versions":["11"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/3d79b643d4e566d16f7a0338d7d6934f6ca7317e"],"severity":"High","spl":"2021-02-01","types":["DoS"],"vanir_signatures":[{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/3d79b643d4e566d16f7a0338d7d6934f6ca7317e","target":{"file":"packages/SettingsProvider/src/android/provider/settings/validators/SystemSettingsValidators.java"},"deprecated":false,"digest":{"line_hashes":["251868267948930631262842790889734041357","278643010149445101918560854673039829933","201997463402855824403463622314323952034","122767186214571317586050533567446794309","90754409172355587776731467853062817965","26695598090596683315798686331415977201","198326124730402711151032827429121598672","265324216888424422881601950607023274360","61386428927940696248194268146844998057","293845088149911133938529335021236916332","109811024417938688278143307134846467099","9928541951384799704259118022938480032"],"threshold":0.9},"id":"ASB-A-156260178-4ec564c8"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-156260178.json"}}],"schema_version":"1.9.0"}