{"id":"ASB-A-156260178", "published":"2021-02-01T00:00:00Z", "modified":"2026-06-19T15:21:58.810540849Z", "aliases":["CVE-2021-0338", "A-156260178"], "details":"In SystemSettingsValidators, there is a possible permanent denial of service due to missing bounds checks on UI settings. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"10:0"}, {"fixed":"10:2021-02-01"}]}], "versions":["10"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/9af8c6364f34c7d7be6c6dff23d3b7052c0a914d"], "severity":"High", "spl":"2021-02-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["223335318938469518514426245447269022788", "57640350119750408815849764577241693968", "188541251490836277355070719114386292828", "71992009000569554972012370457541178099", "227815405439443887615219270422784671254", "278336947106054212457390456237733707848", "198326124730402711151032827429121598672", "265324216888424422881601950607023274360", "336824082160175114097742888306958115358", "35361513993377667144037176944940776463", "310683188912784393686044503234209267756", "73191886621207884001845459534189687069", "201580910959343343568664026600799026420"], "threshold":0.9}, "id":"ASB-A-156260178-7109ffe4", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/9af8c6364f34c7d7be6c6dff23d3b7052c0a914d", "target":{"file":"core/java/android/provider/Settings.java"}}, {"deprecated":false, "digest":{"function_hash":"284531671753312080076594849960250499167", "length":170}, "id":"ASB-A-156260178-7b7cd244", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/9af8c6364f34c7d7be6c6dff23d3b7052c0a914d", "target":{"file":"core/java/android/provider/Settings.java", "function":"validate"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"11:0"}, {"fixed":"11:2021-02-01"}]}], "versions":["11"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/3d79b643d4e566d16f7a0338d7d6934f6ca7317e"], "severity":"High", "spl":"2021-02-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["251868267948930631262842790889734041357", "278643010149445101918560854673039829933", "201997463402855824403463622314323952034", "122767186214571317586050533567446794309", "90754409172355587776731467853062817965", "26695598090596683315798686331415977201", "198326124730402711151032827429121598672", "265324216888424422881601950607023274360", "61386428927940696248194268146844998057", "293845088149911133938529335021236916332", "109811024417938688278143307134846467099", "9928541951384799704259118022938480032"], "threshold":0.9}, "id":"ASB-A-156260178-4ec564c8", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/3d79b643d4e566d16f7a0338d7d6934f6ca7317e", "target":{"file":"packages/SettingsProvider/src/android/provider/settings/validators/SystemSettingsValidators.java"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2021-02-01"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/frameworks/base/+/459f6cbe7537b1ba0b88b96c44099bc897c1bcc8"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/frameworks/base/+/edeb081ad8b22b4a32ff90610f9f06182025e41c"}]}