{"id":"ASB-A-353240784","details":"In multiple functions of AppWidgetServiceImpl.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-353240784","CVE-2024-49741"],"modified":"2026-07-10T15:26:01.587957612Z","published":"2025-02-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2025-02-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/047bc1ce62f84aa0bd5827b49edb330e1cc2da8b"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15-next:0"},{"fixed":"15-next:2025-02-01"}]}],"versions":["15-next"],"ecosystem_specific":{"types":["DoS"],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/2a75f7166b028150ea0dcd142e1ede51f7861eb3"],"spl":"2025-02-01","severity":"High","vanir_signatures":[{"signature_type":"Function","source":"https://android.googlesource.com/platform/frameworks/base/+/2a75f7166b028150ea0dcd142e1ede51f7861eb3","deprecated":false,"target":{"file":"services/appwidget/java/com/android/server/appwidget/AppWidgetServiceImpl.java","function":"addWidgetLocked"},"digest":{"function_hash":"313074325466655676605280082003931912522","length":161},"id":"ASB-A-353240784-0152b3cb","signature_version":"v1"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/2a75f7166b028150ea0dcd142e1ede51f7861eb3","signature_type":"Line","deprecated":false,"target":{"file":"services/appwidget/java/com/android/server/appwidget/AppWidgetServiceImpl.java"},"digest":{"threshold":0.9,"line_hashes":["43660311435050050382585709688577068910","249166140986559321077548608660934337398","176847376872299565086656419121846343674","292127994250651398085576693283002556842","152093235544016367693216882584062469565","338584562536628185485155354524247262212","146558060028963139949552267019298110709","306475899467813990873324024789627674929","190908955396158493842810401007871176533","291944613433444395747628010033278973879","53946197292873515220494566900644792093","108569194531739758682395031162813005925","271189872651345310267853221934700829339","56504929098059580404229757205624245119","162813657391936699187481290415675509414","331806954779022005328842488207777814155"]},"id":"ASB-A-353240784-9016c52e","signature_version":"v1"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/2a75f7166b028150ea0dcd142e1ede51f7861eb3","signature_type":"Function","deprecated":false,"target":{"file":"services/appwidget/java/com/android/server/appwidget/AppWidgetServiceImpl.java","function":"lookupOrAddHostLocked"},"digest":{"length":188,"function_hash":"338833729122539342226944422414438834946"},"id":"ASB-A-353240784-93e0c6b9","signature_version":"v1"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-353240784.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2025-02-01"}]}],"versions":["12"],"ecosystem_specific":{"types":["DoS"],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/ae39a3f6538e5a5a73aea4daf8b552539247227f"],"severity":"High","vanir_signatures":[{"signature_type":"Function","source":"https://android.googlesource.com/platform/frameworks/base/+/ae39a3f6538e5a5a73aea4daf8b552539247227f","deprecated":false,"target":{"file":"services/appwidget/java/com/android/server/appwidget/AppWidgetServiceImpl.java","function":"lookupOrAddHostLocked"},"digest":{"function_hash":"338833729122539342226944422414438834946","length":188},"id":"ASB-A-353240784-4d40dbc2","signature_version":"v1"},{"signature_type":"Line","source":"https://android.googlesource.com/platform/frameworks/base/+/ae39a3f6538e5a5a73aea4daf8b552539247227f","deprecated":false,"target":{"file":"services/appwidget/java/com/android/server/appwidget/AppWidgetServiceImpl.java"},"digest":{"threshold":0.9,"line_hashes":["211590665497380367345155028601456721461","231540159592474288835799657838345877532","293648522360674287502560728971125563905","292127994250651398085576693283002556842","152093235544016367693216882584062469565","338584562536628185485155354524247262212","146558060028963139949552267019298110709","24850561231269811359171541611754208496","183635004074158899654250592193679815457","130019227301112430451192012308933469636","298915705645368639483367808759128057794","99805317381656089202650213620896393240","111733263802058129537726324760934853232","56504929098059580404229757205624245119","162813657391936699187481290415675509414","331806954779022005328842488207777814155"]},"id":"ASB-A-353240784-70219d21","signature_version":"v1"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/ae39a3f6538e5a5a73aea4daf8b552539247227f","signature_type":"Function","deprecated":false,"target":{"file":"services/appwidget/java/com/android/server/appwidget/AppWidgetServiceImpl.java","function":"addWidgetLocked"},"digest":{"length":87,"function_hash":"114202538221393693435860937290887524294"},"id":"ASB-A-353240784-db090208","signature_version":"v1"}],"spl":"2025-02-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-353240784.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2025-02-01"}]}],"versions":["12L"],"ecosystem_specific":{"types":["DoS"],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/ae39a3f6538e5a5a73aea4daf8b552539247227f"],"spl":"2025-02-01","severity":"High","vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/ae39a3f6538e5a5a73aea4daf8b552539247227f","signature_type":"Line","deprecated":false,"target":{"file":"services/appwidget/java/com/android/server/appwidget/AppWidgetServiceImpl.java"},"digest":{"threshold":0.9,"line_hashes":["211590665497380367345155028601456721461","231540159592474288835799657838345877532","293648522360674287502560728971125563905","292127994250651398085576693283002556842","152093235544016367693216882584062469565","338584562536628185485155354524247262212","146558060028963139949552267019298110709","24850561231269811359171541611754208496","183635004074158899654250592193679815457","130019227301112430451192012308933469636","298915705645368639483367808759128057794","99805317381656089202650213620896393240","111733263802058129537726324760934853232","56504929098059580404229757205624245119","162813657391936699187481290415675509414","331806954779022005328842488207777814155"]},"id":"ASB-A-353240784-15ce8c48","signature_version":"v1"},{"signature_type":"Function","source":"https://android.googlesource.com/platform/frameworks/base/+/ae39a3f6538e5a5a73aea4daf8b552539247227f","deprecated":false,"target":{"file":"services/appwidget/java/com/android/server/appwidget/AppWidgetServiceImpl.java","function":"addWidgetLocked"},"digest":{"function_hash":"114202538221393693435860937290887524294","length":87},"id":"ASB-A-353240784-327b5ebc","signature_version":"v1"},{"signature_type":"Function","source":"https://android.googlesource.com/platform/frameworks/base/+/ae39a3f6538e5a5a73aea4daf8b552539247227f","deprecated":false,"target":{"file":"services/appwidget/java/com/android/server/appwidget/AppWidgetServiceImpl.java","function":"lookupOrAddHostLocked"},"digest":{"length":188,"function_hash":"338833729122539342226944422414438834946"},"id":"ASB-A-353240784-4592d2de","signature_version":"v1"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-353240784.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2025-02-01"}]}],"versions":["15"],"ecosystem_specific":{"types":["DoS"],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/1baa20c05661c8489e50693ec15f6c011cc72c18"],"severity":"High","vanir_signatures":[{"id":"ASB-A-353240784-05e49e59","source":"https://android.googlesource.com/platform/frameworks/base/+/1baa20c05661c8489e50693ec15f6c011cc72c18","deprecated":false,"target":{"file":"services/appwidget/java/com/android/server/appwidget/AppWidgetServiceImpl.java","function":"lookupOrAddHostLocked"},"digest":{"length":188,"function_hash":"338833729122539342226944422414438834946"},"signature_type":"Function","signature_version":"v1"},{"signature_type":"Line","source":"https://android.googlesource.com/platform/frameworks/base/+/1baa20c05661c8489e50693ec15f6c011cc72c18","deprecated":false,"target":{"file":"services/appwidget/java/com/android/server/appwidget/AppWidgetServiceImpl.java"},"digest":{"threshold":0.9,"line_hashes":["43660311435050050382585709688577068910","249166140986559321077548608660934337398","176847376872299565086656419121846343674","292127994250651398085576693283002556842","152093235544016367693216882584062469565","338584562536628185485155354524247262212","146558060028963139949552267019298110709","306475899467813990873324024789627674929","190908955396158493842810401007871176533","291944613433444395747628010033278973879","53946197292873515220494566900644792093","108569194531739758682395031162813005925","271189872651345310267853221934700829339","56504929098059580404229757205624245119","162813657391936699187481290415675509414","331806954779022005328842488207777814155"]},"id":"ASB-A-353240784-41fd1fa6","signature_version":"v1"},{"signature_type":"Function","id":"ASB-A-353240784-fa89b4a7","deprecated":false,"target":{"file":"services/appwidget/java/com/android/server/appwidget/AppWidgetServiceImpl.java","function":"addWidgetLocked"},"digest":{"function_hash":"313074325466655676605280082003931912522","length":161},"source":"https://android.googlesource.com/platform/frameworks/base/+/1baa20c05661c8489e50693ec15f6c011cc72c18","signature_version":"v1"}],"spl":"2025-02-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-353240784.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2025-02-01"}]}],"versions":["13"],"ecosystem_specific":{"types":["DoS"],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/ae39a3f6538e5a5a73aea4daf8b552539247227f"],"spl":"2025-02-01","severity":"High","vanir_signatures":[{"signature_type":"Line","source":"https://android.googlesource.com/platform/frameworks/base/+/ae39a3f6538e5a5a73aea4daf8b552539247227f","deprecated":false,"target":{"file":"services/appwidget/java/com/android/server/appwidget/AppWidgetServiceImpl.java"},"digest":{"threshold":0.9,"line_hashes":["211590665497380367345155028601456721461","231540159592474288835799657838345877532","293648522360674287502560728971125563905","292127994250651398085576693283002556842","152093235544016367693216882584062469565","338584562536628185485155354524247262212","146558060028963139949552267019298110709","24850561231269811359171541611754208496","183635004074158899654250592193679815457","130019227301112430451192012308933469636","298915705645368639483367808759128057794","99805317381656089202650213620896393240","111733263802058129537726324760934853232","56504929098059580404229757205624245119","162813657391936699187481290415675509414","331806954779022005328842488207777814155"]},"id":"ASB-A-353240784-16a5c279","signature_version":"v1"},{"signature_type":"Function","source":"https://android.googlesource.com/platform/frameworks/base/+/ae39a3f6538e5a5a73aea4daf8b552539247227f","deprecated":false,"target":{"file":"services/appwidget/java/com/android/server/appwidget/AppWidgetServiceImpl.java","function":"lookupOrAddHostLocked"},"digest":{"function_hash":"338833729122539342226944422414438834946","length":188},"id":"ASB-A-353240784-7b051940","signature_version":"v1"},{"id":"ASB-A-353240784-87231162","source":"https://android.googlesource.com/platform/frameworks/base/+/ae39a3f6538e5a5a73aea4daf8b552539247227f","deprecated":false,"target":{"file":"services/appwidget/java/com/android/server/appwidget/AppWidgetServiceImpl.java","function":"addWidgetLocked"},"digest":{"function_hash":"114202538221393693435860937290887524294","length":87},"signature_type":"Function","signature_version":"v1"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-353240784.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2025-02-01"}]}],"versions":["14"],"ecosystem_specific":{"types":["DoS"],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/ae39a3f6538e5a5a73aea4daf8b552539247227f"],"spl":"2025-02-01","severity":"High","vanir_signatures":[{"signature_type":"Function","source":"https://android.googlesource.com/platform/frameworks/base/+/ae39a3f6538e5a5a73aea4daf8b552539247227f","deprecated":false,"target":{"file":"services/appwidget/java/com/android/server/appwidget/AppWidgetServiceImpl.java","function":"addWidgetLocked"},"digest":{"length":87,"function_hash":"114202538221393693435860937290887524294"},"id":"ASB-A-353240784-1e7752b7","signature_version":"v1"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/ae39a3f6538e5a5a73aea4daf8b552539247227f","signature_type":"Line","deprecated":false,"target":{"file":"services/appwidget/java/com/android/server/appwidget/AppWidgetServiceImpl.java"},"digest":{"threshold":0.9,"line_hashes":["211590665497380367345155028601456721461","231540159592474288835799657838345877532","293648522360674287502560728971125563905","292127994250651398085576693283002556842","152093235544016367693216882584062469565","338584562536628185485155354524247262212","146558060028963139949552267019298110709","24850561231269811359171541611754208496","183635004074158899654250592193679815457","130019227301112430451192012308933469636","298915705645368639483367808759128057794","99805317381656089202650213620896393240","111733263802058129537726324760934853232","56504929098059580404229757205624245119","162813657391936699187481290415675509414","331806954779022005328842488207777814155"]},"id":"ASB-A-353240784-8f5b1113","signature_version":"v1"},{"signature_type":"Function","source":"https://android.googlesource.com/platform/frameworks/base/+/ae39a3f6538e5a5a73aea4daf8b552539247227f","deprecated":false,"target":{"file":"services/appwidget/java/com/android/server/appwidget/AppWidgetServiceImpl.java","function":"lookupOrAddHostLocked"},"digest":{"function_hash":"338833729122539342226944422414438834946","length":188},"id":"ASB-A-353240784-a1e0ce61","signature_version":"v1"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-353240784.json"}}],"schema_version":"1.7.5"}