{"id":"ASB-A-246542285","details":"In multiple functions of JobStore.java, there is a possible way to cause a crash on startup due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-246542285","CVE-2023-21136"],"modified":"2026-05-01T15:24:27.653932Z","published":"2023-06-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2023-06-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/f11ce5d7cac6a128d3eefad2b8e94ca7dd054713"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13-next:0"},{"fixed":"13-next:2023-06-01"}]}],"versions":["13-next"],"ecosystem_specific":{"vanir_signatures":[{"deprecated":false,"digest":{"length":1103,"function_hash":"136545259088351736556952524132594636377"},"source":"https://android.googlesource.com/platform/frameworks/base/+/c98fb42b480b3beedc2d94de6110f50212c4aa0b","target":{"function":"run","file":"apex/jobscheduler/service/java/com/android/server/job/JobStore.java"},"id":"ASB-A-246542285-02962334","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"length":5097,"function_hash":"159803640029266232665177633215008020851"},"source":"https://android.googlesource.com/platform/frameworks/base/+/c98fb42b480b3beedc2d94de6110f50212c4aa0b","target":{"function":"restoreJobFromXml","file":"apex/jobscheduler/service/java/com/android/server/job/JobStore.java"},"id":"ASB-A-246542285-8c650f88","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["88748618308055000220281674766198731040","249396715037558805745221194740979561064","164301605750507272451520189089934655050","109795612308487052653223368718562200607","155887119447236720631965822184620922830","195462494314817103218167905857025189667","181057859908330440942386339798719726241","55707820669319239591884054813340303362","76508389472740143566711447382965763458","6036956544649657987674883707972804403","185064586106528140455954287194035703738","310769436540893605940414805746805545034","98497899714125290758167772968008829574"]},"source":"https://android.googlesource.com/platform/frameworks/base/+/c98fb42b480b3beedc2d94de6110f50212c4aa0b","target":{"file":"apex/jobscheduler/service/java/com/android/server/job/JobStore.java"},"id":"ASB-A-246542285-eb787988","signature_type":"Line","signature_version":"v1"}],"severity":"High","spl":"2023-06-01","types":["DoS"],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/c98fb42b480b3beedc2d94de6110f50212c4aa0b"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-246542285.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2023-06-01"}]}],"versions":["11"],"ecosystem_specific":{"vanir_signatures":[{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["88748618308055000220281674766198731040","249396715037558805745221194740979561064","164301605750507272451520189089934655050","109795612308487052653223368718562200607","191092451028706471989826207359428222321","176948151945717884359093361413297039595","312007121508315593880636888456202924387","55707820669319239591884054813340303362","76508389472740143566711447382965763458","6036956544649657987674883707972804403","185064586106528140455954287194035703738","310769436540893605940414805746805545034","98497899714125290758167772968008829574","184444492363715158236138147782101578844","251858206377763059149894888984118969576","45402239069496976582529813712329354330","70547789342647153197139359616031552629"]},"source":"https://android.googlesource.com/platform/frameworks/base/+/df1ba00dd9f64a3ae9a9e05979dfae6a15c7e203","target":{"file":"apex/jobscheduler/service/java/com/android/server/job/JobStore.java"},"id":"ASB-A-246542285-1260ffc1","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"length":1650,"function_hash":"144351440169903802785837934162513148992"},"source":"https://android.googlesource.com/platform/frameworks/base/+/df1ba00dd9f64a3ae9a9e05979dfae6a15c7e203","target":{"function":"buildConstraintsFromXml","file":"apex/jobscheduler/service/java/com/android/server/job/JobStore.java"},"id":"ASB-A-246542285-8a87109e","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"length":4611,"function_hash":"246742673806852824031168716262510995243"},"source":"https://android.googlesource.com/platform/frameworks/base/+/df1ba00dd9f64a3ae9a9e05979dfae6a15c7e203","target":{"function":"restoreJobFromXml","file":"apex/jobscheduler/service/java/com/android/server/job/JobStore.java"},"id":"ASB-A-246542285-8b0e4875","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"length":1112,"function_hash":"63855270129629367971985376108846616096"},"source":"https://android.googlesource.com/platform/frameworks/base/+/df1ba00dd9f64a3ae9a9e05979dfae6a15c7e203","target":{"function":"run","file":"apex/jobscheduler/service/java/com/android/server/job/JobStore.java"},"id":"ASB-A-246542285-bb97a6be","signature_type":"Function","signature_version":"v1"}],"severity":"High","spl":"2023-06-01","types":["DoS"],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/df1ba00dd9f64a3ae9a9e05979dfae6a15c7e203"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-246542285.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2023-06-01"}]}],"versions":["12"],"ecosystem_specific":{"vanir_signatures":[{"deprecated":false,"digest":{"length":1112,"function_hash":"63855270129629367971985376108846616096"},"source":"https://android.googlesource.com/platform/frameworks/base/+/7bdc1e8a3affd8534a829744001ef3ea26cce074","target":{"function":"run","file":"apex/jobscheduler/service/java/com/android/server/job/JobStore.java"},"id":"ASB-A-246542285-17576bff","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["88748618308055000220281674766198731040","249396715037558805745221194740979561064","164301605750507272451520189089934655050","109795612308487052653223368718562200607","155887119447236720631965822184620922830","195462494314817103218167905857025189667","181057859908330440942386339798719726241","55707820669319239591884054813340303362","76508389472740143566711447382965763458","6036956544649657987674883707972804403","185064586106528140455954287194035703738","310769436540893605940414805746805545034","98497899714125290758167772968008829574"]},"source":"https://android.googlesource.com/platform/frameworks/base/+/7bdc1e8a3affd8534a829744001ef3ea26cce074","target":{"file":"apex/jobscheduler/service/java/com/android/server/job/JobStore.java"},"id":"ASB-A-246542285-bc110808","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"length":4851,"function_hash":"249545300660216615314541107259671027997"},"source":"https://android.googlesource.com/platform/frameworks/base/+/7bdc1e8a3affd8534a829744001ef3ea26cce074","target":{"function":"restoreJobFromXml","file":"apex/jobscheduler/service/java/com/android/server/job/JobStore.java"},"id":"ASB-A-246542285-c04594d2","signature_type":"Function","signature_version":"v1"}],"severity":"High","spl":"2023-06-01","types":["DoS"],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/7bdc1e8a3affd8534a829744001ef3ea26cce074"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-246542285.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2023-06-01"}]}],"versions":["12L"],"ecosystem_specific":{"vanir_signatures":[{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["88748618308055000220281674766198731040","249396715037558805745221194740979561064","164301605750507272451520189089934655050","109795612308487052653223368718562200607","155887119447236720631965822184620922830","195462494314817103218167905857025189667","181057859908330440942386339798719726241","55707820669319239591884054813340303362","76508389472740143566711447382965763458","6036956544649657987674883707972804403","185064586106528140455954287194035703738","310769436540893605940414805746805545034","98497899714125290758167772968008829574"]},"source":"https://android.googlesource.com/platform/frameworks/base/+/53522d89c172898ae4ea07533dbc43666cbb1924","target":{"file":"apex/jobscheduler/service/java/com/android/server/job/JobStore.java"},"id":"ASB-A-246542285-508a7c1d","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"length":4851,"function_hash":"249545300660216615314541107259671027997"},"source":"https://android.googlesource.com/platform/frameworks/base/+/53522d89c172898ae4ea07533dbc43666cbb1924","target":{"function":"restoreJobFromXml","file":"apex/jobscheduler/service/java/com/android/server/job/JobStore.java"},"id":"ASB-A-246542285-73ea76b8","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"length":1112,"function_hash":"63855270129629367971985376108846616096"},"source":"https://android.googlesource.com/platform/frameworks/base/+/53522d89c172898ae4ea07533dbc43666cbb1924","target":{"function":"run","file":"apex/jobscheduler/service/java/com/android/server/job/JobStore.java"},"id":"ASB-A-246542285-e315a8e3","signature_type":"Function","signature_version":"v1"}],"severity":"High","spl":"2023-06-01","types":["DoS"],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/53522d89c172898ae4ea07533dbc43666cbb1924"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-246542285.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2023-06-01"}]}],"versions":["13"],"ecosystem_specific":{"vanir_signatures":[{"deprecated":false,"digest":{"length":1103,"function_hash":"136545259088351736556952524132594636377"},"source":"https://android.googlesource.com/platform/frameworks/base/+/8c8d1c0dfe94f9431bc8094773b2998c9912a629","target":{"function":"run","file":"apex/jobscheduler/service/java/com/android/server/job/JobStore.java"},"id":"ASB-A-246542285-06f5c561","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["88748618308055000220281674766198731040","249396715037558805745221194740979561064","164301605750507272451520189089934655050","109795612308487052653223368718562200607","155887119447236720631965822184620922830","195462494314817103218167905857025189667","181057859908330440942386339798719726241","55707820669319239591884054813340303362","76508389472740143566711447382965763458","6036956544649657987674883707972804403","185064586106528140455954287194035703738","310769436540893605940414805746805545034","98497899714125290758167772968008829574"]},"source":"https://android.googlesource.com/platform/frameworks/base/+/8c8d1c0dfe94f9431bc8094773b2998c9912a629","target":{"file":"apex/jobscheduler/service/java/com/android/server/job/JobStore.java"},"id":"ASB-A-246542285-70ebcf58","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"length":5097,"function_hash":"159803640029266232665177633215008020851"},"source":"https://android.googlesource.com/platform/frameworks/base/+/8c8d1c0dfe94f9431bc8094773b2998c9912a629","target":{"function":"restoreJobFromXml","file":"apex/jobscheduler/service/java/com/android/server/job/JobStore.java"},"id":"ASB-A-246542285-7736377f","signature_type":"Function","signature_version":"v1"}],"severity":"High","spl":"2023-06-01","types":["DoS"],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/8c8d1c0dfe94f9431bc8094773b2998c9912a629"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-246542285.json"}}],"schema_version":"1.7.5"}