{"id":"ASB-A-304983146","details":"In multiple functions of AppOpsService.java, there is a possible way to saturate the content of /data/system/appops_accesses.xml due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-304983146","CVE-2024-23712"],"modified":"2026-05-22T15:55:21.353668239Z","published":"2024-04-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2024-04-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/6beb68ca17d1220f3f09a53cf0a0c541db4ead62"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14-next:0"},{"fixed":"14-next:2024-04-01"}]}],"versions":["14-next"],"ecosystem_specific":{"types":["DoS"],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/ed1b87a33bcf66976b05b81090734da8dff9db3f"],"vanir_signatures":[{"id":"ASB-A-304983146-27fa040e","source":"https://android.googlesource.com/platform/frameworks/base/+/ed1b87a33bcf66976b05b81090734da8dff9db3f","signature_type":"Function","signature_version":"v1","target":{"function":"startOperationUnchecked","file":"services/core/java/com/android/server/appop/AppOpsService.java"},"digest":{"function_hash":"232623836874949948695404678354883149009","length":3640},"deprecated":false},{"id":"ASB-A-304983146-498581fd","source":"https://android.googlesource.com/platform/frameworks/base/+/ed1b87a33bcf66976b05b81090734da8dff9db3f","signature_type":"Function","target":{"function":"noteOperationUnchecked","file":"services/core/java/com/android/server/appop/AppOpsService.java"},"signature_version":"v1","digest":{"function_hash":"176438859952732613860997864078958374481","length":4389},"deprecated":false},{"id":"ASB-A-304983146-c35e9823","source":"https://android.googlesource.com/platform/frameworks/base/+/ed1b87a33bcf66976b05b81090734da8dff9db3f","signature_type":"Line","signature_version":"v1","target":{"file":"core/java/com/android/internal/pm/pkg/component/ParsedAttributionImpl.java"},"digest":{"threshold":0.9,"line_hashes":["151850781126740994677930449484281180108","313967075586109161413622405829105309856","239297483431522647029712245679000921313","162379999363402918127079425003222547653"]},"deprecated":false},{"id":"ASB-A-304983146-cd4e81b8","source":"https://android.googlesource.com/platform/frameworks/base/+/ed1b87a33bcf66976b05b81090734da8dff9db3f","signature_type":"Line","target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java"},"signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["203692094594859179449492540381006822053","159170551258476534224530007494247430158","196262562010751014984167937821109658377","271206429704211916869545183247942580876","201760475806120286497210186673097628914","15490112073715494497703134835590621815","140619413272547040732471719730789088389","313704556565786266323605999066013151554","152195472887382778895676848893377324796","53188427883807805721307024530733871198","224197903772886391777787802984484344913"]},"deprecated":false}],"spl":"2024-04-01","severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-304983146.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2024-04-01"}]}],"versions":["12"],"ecosystem_specific":{"types":["DoS"],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/d9dc82face08025e6ccacb0ac6f7266fce5d2ea6"],"spl":"2024-04-01","vanir_signatures":[{"id":"ASB-A-304983146-53a7fb0c","source":"https://android.googlesource.com/platform/frameworks/base/+/d9dc82face08025e6ccacb0ac6f7266fce5d2ea6","signature_type":"Function","target":{"function":"noteOperationUnchecked","file":"services/core/java/com/android/server/appop/AppOpsService.java"},"signature_version":"v1","digest":{"function_hash":"266035093366289547032032226468968911596","length":3350},"deprecated":false},{"id":"ASB-A-304983146-5aa363d6","source":"https://android.googlesource.com/platform/frameworks/base/+/d9dc82face08025e6ccacb0ac6f7266fce5d2ea6","signature_type":"Function","signature_version":"v1","target":{"function":"startOperationUnchecked","file":"services/core/java/com/android/server/appop/AppOpsService.java"},"digest":{"function_hash":"136499699954469916850633007007494441375","length":3512},"deprecated":false},{"id":"ASB-A-304983146-7867ea59","source":"https://android.googlesource.com/platform/frameworks/base/+/d9dc82face08025e6ccacb0ac6f7266fce5d2ea6","signature_type":"Line","signature_version":"v1","target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java"},"digest":{"threshold":0.9,"line_hashes":["223118865913059091932845217710602264970","159170551258476534224530007494247430158","196262562010751014984167937821109658377","271206429704211916869545183247942580876","184716246159821520227140514504186886326","15490112073715494497703134835590621815","140619413272547040732471719730789088389","313704556565786266323605999066013151554","197018539196923796303820716691024091926","67351175576118803245401050395131482810","163464232503255870359481573973298738403"]},"deprecated":false},{"id":"ASB-A-304983146-a6152d8d","source":"https://android.googlesource.com/platform/frameworks/base/+/d9dc82face08025e6ccacb0ac6f7266fce5d2ea6","signature_type":"Line","target":{"file":"core/java/android/content/pm/parsing/component/ParsedAttribution.java"},"signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["36555045155363176485225358241182252053","289642366243729790070500570013536702372","92790997805144870383668633938705281770","26908623660400596420149864300185620885"]},"deprecated":false}],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-304983146.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2024-04-01"}]}],"versions":["12L"],"ecosystem_specific":{"types":["DoS"],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/6219cbabc1e6eaefc0e3eab1e10f0d986d3ed546"],"vanir_signatures":[{"id":"ASB-A-304983146-460229c2","source":"https://android.googlesource.com/platform/frameworks/base/+/6219cbabc1e6eaefc0e3eab1e10f0d986d3ed546","signature_type":"Function","target":{"function":"noteOperationUnchecked","file":"services/core/java/com/android/server/appop/AppOpsService.java"},"signature_version":"v1","digest":{"function_hash":"266035093366289547032032226468968911596","length":3350},"deprecated":false},{"id":"ASB-A-304983146-936b43a2","source":"https://android.googlesource.com/platform/frameworks/base/+/6219cbabc1e6eaefc0e3eab1e10f0d986d3ed546","signature_type":"Function","target":{"function":"startOperationUnchecked","file":"services/core/java/com/android/server/appop/AppOpsService.java"},"signature_version":"v1","digest":{"function_hash":"136499699954469916850633007007494441375","length":3512},"deprecated":false},{"id":"ASB-A-304983146-9cd4d6b9","source":"https://android.googlesource.com/platform/frameworks/base/+/6219cbabc1e6eaefc0e3eab1e10f0d986d3ed546","signature_type":"Line","target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java"},"signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["223118865913059091932845217710602264970","159170551258476534224530007494247430158","196262562010751014984167937821109658377","271206429704211916869545183247942580876","184716246159821520227140514504186886326","15490112073715494497703134835590621815","140619413272547040732471719730789088389","313704556565786266323605999066013151554","197018539196923796303820716691024091926","67351175576118803245401050395131482810","163464232503255870359481573973298738403"]},"deprecated":false},{"id":"ASB-A-304983146-a3f0c35f","source":"https://android.googlesource.com/platform/frameworks/base/+/6219cbabc1e6eaefc0e3eab1e10f0d986d3ed546","signature_type":"Line","signature_version":"v1","target":{"file":"core/java/android/content/pm/parsing/component/ParsedAttribution.java"},"digest":{"threshold":0.9,"line_hashes":["36555045155363176485225358241182252053","289642366243729790070500570013536702372","92790997805144870383668633938705281770","26908623660400596420149864300185620885"]},"deprecated":false}],"spl":"2024-04-01","severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-304983146.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2024-04-01"}]}],"versions":["13"],"ecosystem_specific":{"types":["DoS"],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/63d122cf0e18ff6d8e77b7bcc8f0f3f8d4e4a018"],"vanir_signatures":[{"id":"ASB-A-304983146-1a018a35","source":"https://android.googlesource.com/platform/frameworks/base/+/63d122cf0e18ff6d8e77b7bcc8f0f3f8d4e4a018","signature_type":"Function","target":{"function":"noteOperationUnchecked","file":"services/core/java/com/android/server/appop/AppOpsService.java"},"signature_version":"v1","digest":{"function_hash":"266035093366289547032032226468968911596","length":3350},"deprecated":false},{"id":"ASB-A-304983146-1d6743e1","source":"https://android.googlesource.com/platform/frameworks/base/+/63d122cf0e18ff6d8e77b7bcc8f0f3f8d4e4a018","signature_type":"Function","target":{"function":"startOperationUnchecked","file":"services/core/java/com/android/server/appop/AppOpsService.java"},"signature_version":"v1","digest":{"function_hash":"136499699954469916850633007007494441375","length":3512},"deprecated":false},{"id":"ASB-A-304983146-a251d244","source":"https://android.googlesource.com/platform/frameworks/base/+/63d122cf0e18ff6d8e77b7bcc8f0f3f8d4e4a018","signature_type":"Line","target":{"file":"services/core/java/com/android/server/pm/pkg/component/ParsedAttributionImpl.java"},"signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["151850781126740994677930449484281180108","313967075586109161413622405829105309856","239297483431522647029712245679000921313","162379999363402918127079425003222547653"]},"deprecated":false},{"id":"ASB-A-304983146-bba2a6fb","source":"https://android.googlesource.com/platform/frameworks/base/+/63d122cf0e18ff6d8e77b7bcc8f0f3f8d4e4a018","signature_type":"Line","signature_version":"v1","target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java"},"digest":{"threshold":0.9,"line_hashes":["223118865913059091932845217710602264970","159170551258476534224530007494247430158","196262562010751014984167937821109658377","271206429704211916869545183247942580876","184716246159821520227140514504186886326","15490112073715494497703134835590621815","140619413272547040732471719730789088389","313704556565786266323605999066013151554","197018539196923796303820716691024091926","67351175576118803245401050395131482810","163464232503255870359481573973298738403"]},"deprecated":false}],"spl":"2024-04-01","severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-304983146.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2024-04-01"}]}],"versions":["14"],"ecosystem_specific":{"types":["DoS"],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/2806d263c0b74da36d6d2bcc1583ea641266fd43"],"vanir_signatures":[{"id":"ASB-A-304983146-6aa6a348","source":"https://android.googlesource.com/platform/frameworks/base/+/2806d263c0b74da36d6d2bcc1583ea641266fd43","signature_type":"Function","target":{"function":"noteOperationUnchecked","file":"services/core/java/com/android/server/appop/AppOpsService.java"},"signature_version":"v1","digest":{"function_hash":"119770699092160446334754408352295300192","length":3526},"deprecated":false},{"id":"ASB-A-304983146-a79726de","source":"https://android.googlesource.com/platform/frameworks/base/+/2806d263c0b74da36d6d2bcc1583ea641266fd43","signature_type":"Line","signature_version":"v1","target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java"},"digest":{"threshold":0.9,"line_hashes":["203692094594859179449492540381006822053","159170551258476534224530007494247430158","196262562010751014984167937821109658377","271206429704211916869545183247942580876","203692094594859179449492540381006822053","15490112073715494497703134835590621815","140619413272547040732471719730789088389","313704556565786266323605999066013151554","197018539196923796303820716691024091926","67351175576118803245401050395131482810","163464232503255870359481573973298738403"]},"deprecated":false},{"id":"ASB-A-304983146-c37702ea","source":"https://android.googlesource.com/platform/frameworks/base/+/2806d263c0b74da36d6d2bcc1583ea641266fd43","signature_type":"Function","target":{"function":"startOperationUnchecked","file":"services/core/java/com/android/server/appop/AppOpsService.java"},"signature_version":"v1","digest":{"function_hash":"151293384462048927526513931103293469442","length":3689},"deprecated":false},{"id":"ASB-A-304983146-dab29ad9","source":"https://android.googlesource.com/platform/frameworks/base/+/2806d263c0b74da36d6d2bcc1583ea641266fd43","signature_type":"Line","target":{"file":"services/core/java/com/android/server/pm/pkg/component/ParsedAttributionImpl.java"},"signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["151850781126740994677930449484281180108","313967075586109161413622405829105309856","239297483431522647029712245679000921313","162379999363402918127079425003222547653"]},"deprecated":false}],"spl":"2024-04-01","severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-304983146.json"}}],"schema_version":"1.7.5"}