{"id":"ASB-A-353240784", "published":"2025-02-01T00:00:00Z", "modified":"2026-07-09T15:25:53.339171538Z", "aliases":["CVE-2024-49741", "A-353240784"], "details":"In multiple functions of AppWidgetServiceImpl.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"15-next:0"}, {"fixed":"15-next:2025-02-01"}]}], "versions":["15-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/2a75f7166b028150ea0dcd142e1ede51f7861eb3"], "severity":"High", "spl":"2025-02-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"313074325466655676605280082003931912522", "length":161}, "id":"ASB-A-353240784-0152b3cb", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/2a75f7166b028150ea0dcd142e1ede51f7861eb3", "target":{"file":"services/appwidget/java/com/android/server/appwidget/AppWidgetServiceImpl.java", "function":"addWidgetLocked"}}, {"deprecated":false, "digest":{"line_hashes":["43660311435050050382585709688577068910", "249166140986559321077548608660934337398", "176847376872299565086656419121846343674", "292127994250651398085576693283002556842", "152093235544016367693216882584062469565", "338584562536628185485155354524247262212", "146558060028963139949552267019298110709", "306475899467813990873324024789627674929", "190908955396158493842810401007871176533", "291944613433444395747628010033278973879", "53946197292873515220494566900644792093", "108569194531739758682395031162813005925", "271189872651345310267853221934700829339", "56504929098059580404229757205624245119", "162813657391936699187481290415675509414", "331806954779022005328842488207777814155"], "threshold":0.9}, "id":"ASB-A-353240784-9016c52e", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/2a75f7166b028150ea0dcd142e1ede51f7861eb3", "target":{"file":"services/appwidget/java/com/android/server/appwidget/AppWidgetServiceImpl.java"}}, {"deprecated":false, "digest":{"function_hash":"338833729122539342226944422414438834946", "length":188}, "id":"ASB-A-353240784-93e0c6b9", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/2a75f7166b028150ea0dcd142e1ede51f7861eb3", "target":{"file":"services/appwidget/java/com/android/server/appwidget/AppWidgetServiceImpl.java", "function":"lookupOrAddHostLocked"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"12:0"}, {"fixed":"12:2025-02-01"}]}], "versions":["12"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/ae39a3f6538e5a5a73aea4daf8b552539247227f"], "severity":"High", "spl":"2025-02-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"338833729122539342226944422414438834946", "length":188}, "id":"ASB-A-353240784-4d40dbc2", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/ae39a3f6538e5a5a73aea4daf8b552539247227f", "target":{"file":"services/appwidget/java/com/android/server/appwidget/AppWidgetServiceImpl.java", "function":"lookupOrAddHostLocked"}}, {"deprecated":false, "digest":{"line_hashes":["211590665497380367345155028601456721461", "231540159592474288835799657838345877532", "293648522360674287502560728971125563905", "292127994250651398085576693283002556842", "152093235544016367693216882584062469565", "338584562536628185485155354524247262212", "146558060028963139949552267019298110709", "24850561231269811359171541611754208496", "183635004074158899654250592193679815457", "130019227301112430451192012308933469636", "298915705645368639483367808759128057794", "99805317381656089202650213620896393240", "111733263802058129537726324760934853232", "56504929098059580404229757205624245119", "162813657391936699187481290415675509414", "331806954779022005328842488207777814155"], "threshold":0.9}, "id":"ASB-A-353240784-70219d21", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/ae39a3f6538e5a5a73aea4daf8b552539247227f", "target":{"file":"services/appwidget/java/com/android/server/appwidget/AppWidgetServiceImpl.java"}}, {"deprecated":false, "digest":{"function_hash":"114202538221393693435860937290887524294", "length":87}, "id":"ASB-A-353240784-db090208", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/ae39a3f6538e5a5a73aea4daf8b552539247227f", "target":{"file":"services/appwidget/java/com/android/server/appwidget/AppWidgetServiceImpl.java", "function":"addWidgetLocked"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"12L:0"}, {"fixed":"12L:2025-02-01"}]}], "versions":["12L"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/ae39a3f6538e5a5a73aea4daf8b552539247227f"], "severity":"High", "spl":"2025-02-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["211590665497380367345155028601456721461", "231540159592474288835799657838345877532", "293648522360674287502560728971125563905", "292127994250651398085576693283002556842", "152093235544016367693216882584062469565", "338584562536628185485155354524247262212", "146558060028963139949552267019298110709", "24850561231269811359171541611754208496", "183635004074158899654250592193679815457", "130019227301112430451192012308933469636", "298915705645368639483367808759128057794", "99805317381656089202650213620896393240", "111733263802058129537726324760934853232", "56504929098059580404229757205624245119", "162813657391936699187481290415675509414", "331806954779022005328842488207777814155"], "threshold":0.9}, "id":"ASB-A-353240784-15ce8c48", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/ae39a3f6538e5a5a73aea4daf8b552539247227f", "target":{"file":"services/appwidget/java/com/android/server/appwidget/AppWidgetServiceImpl.java"}}, {"deprecated":false, "digest":{"function_hash":"114202538221393693435860937290887524294", "length":87}, "id":"ASB-A-353240784-327b5ebc", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/ae39a3f6538e5a5a73aea4daf8b552539247227f", "target":{"file":"services/appwidget/java/com/android/server/appwidget/AppWidgetServiceImpl.java", "function":"addWidgetLocked"}}, {"deprecated":false, "digest":{"function_hash":"338833729122539342226944422414438834946", "length":188}, "id":"ASB-A-353240784-4592d2de", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/ae39a3f6538e5a5a73aea4daf8b552539247227f", "target":{"file":"services/appwidget/java/com/android/server/appwidget/AppWidgetServiceImpl.java", "function":"lookupOrAddHostLocked"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"15:0"}, {"fixed":"15:2025-02-01"}]}], "versions":["15"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/1baa20c05661c8489e50693ec15f6c011cc72c18"], "severity":"High", "spl":"2025-02-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"338833729122539342226944422414438834946", "length":188}, "id":"ASB-A-353240784-05e49e59", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/1baa20c05661c8489e50693ec15f6c011cc72c18", "target":{"file":"services/appwidget/java/com/android/server/appwidget/AppWidgetServiceImpl.java", "function":"lookupOrAddHostLocked"}}, {"deprecated":false, "digest":{"line_hashes":["43660311435050050382585709688577068910", "249166140986559321077548608660934337398", "176847376872299565086656419121846343674", "292127994250651398085576693283002556842", "152093235544016367693216882584062469565", "338584562536628185485155354524247262212", "146558060028963139949552267019298110709", "306475899467813990873324024789627674929", "190908955396158493842810401007871176533", "291944613433444395747628010033278973879", "53946197292873515220494566900644792093", "108569194531739758682395031162813005925", "271189872651345310267853221934700829339", "56504929098059580404229757205624245119", "162813657391936699187481290415675509414", "331806954779022005328842488207777814155"], "threshold":0.9}, "id":"ASB-A-353240784-41fd1fa6", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/1baa20c05661c8489e50693ec15f6c011cc72c18", "target":{"file":"services/appwidget/java/com/android/server/appwidget/AppWidgetServiceImpl.java"}}, {"deprecated":false, "digest":{"function_hash":"313074325466655676605280082003931912522", "length":161}, "id":"ASB-A-353240784-fa89b4a7", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/1baa20c05661c8489e50693ec15f6c011cc72c18", "target":{"file":"services/appwidget/java/com/android/server/appwidget/AppWidgetServiceImpl.java", "function":"addWidgetLocked"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"13:0"}, {"fixed":"13:2025-02-01"}]}], "versions":["13"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/ae39a3f6538e5a5a73aea4daf8b552539247227f"], "severity":"High", "spl":"2025-02-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["211590665497380367345155028601456721461", "231540159592474288835799657838345877532", "293648522360674287502560728971125563905", "292127994250651398085576693283002556842", "152093235544016367693216882584062469565", "338584562536628185485155354524247262212", "146558060028963139949552267019298110709", "24850561231269811359171541611754208496", "183635004074158899654250592193679815457", "130019227301112430451192012308933469636", "298915705645368639483367808759128057794", "99805317381656089202650213620896393240", "111733263802058129537726324760934853232", "56504929098059580404229757205624245119", "162813657391936699187481290415675509414", "331806954779022005328842488207777814155"], "threshold":0.9}, "id":"ASB-A-353240784-16a5c279", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/ae39a3f6538e5a5a73aea4daf8b552539247227f", "target":{"file":"services/appwidget/java/com/android/server/appwidget/AppWidgetServiceImpl.java"}}, {"deprecated":false, "digest":{"function_hash":"338833729122539342226944422414438834946", "length":188}, "id":"ASB-A-353240784-7b051940", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/ae39a3f6538e5a5a73aea4daf8b552539247227f", "target":{"file":"services/appwidget/java/com/android/server/appwidget/AppWidgetServiceImpl.java", "function":"lookupOrAddHostLocked"}}, {"deprecated":false, "digest":{"function_hash":"114202538221393693435860937290887524294", "length":87}, "id":"ASB-A-353240784-87231162", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/ae39a3f6538e5a5a73aea4daf8b552539247227f", "target":{"file":"services/appwidget/java/com/android/server/appwidget/AppWidgetServiceImpl.java", "function":"addWidgetLocked"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"14:0"}, {"fixed":"14:2025-02-01"}]}], "versions":["14"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/ae39a3f6538e5a5a73aea4daf8b552539247227f"], "severity":"High", "spl":"2025-02-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"114202538221393693435860937290887524294", "length":87}, "id":"ASB-A-353240784-1e7752b7", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/ae39a3f6538e5a5a73aea4daf8b552539247227f", "target":{"file":"services/appwidget/java/com/android/server/appwidget/AppWidgetServiceImpl.java", "function":"addWidgetLocked"}}, {"deprecated":false, "digest":{"line_hashes":["211590665497380367345155028601456721461", "231540159592474288835799657838345877532", "293648522360674287502560728971125563905", "292127994250651398085576693283002556842", "152093235544016367693216882584062469565", "338584562536628185485155354524247262212", "146558060028963139949552267019298110709", "24850561231269811359171541611754208496", "183635004074158899654250592193679815457", "130019227301112430451192012308933469636", "298915705645368639483367808759128057794", "99805317381656089202650213620896393240", "111733263802058129537726324760934853232", "56504929098059580404229757205624245119", "162813657391936699187481290415675509414", "331806954779022005328842488207777814155"], "threshold":0.9}, "id":"ASB-A-353240784-8f5b1113", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/ae39a3f6538e5a5a73aea4daf8b552539247227f", "target":{"file":"services/appwidget/java/com/android/server/appwidget/AppWidgetServiceImpl.java"}}, {"deprecated":false, "digest":{"function_hash":"338833729122539342226944422414438834946", "length":188}, "id":"ASB-A-353240784-a1e0ce61", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/ae39a3f6538e5a5a73aea4daf8b552539247227f", "target":{"file":"services/appwidget/java/com/android/server/appwidget/AppWidgetServiceImpl.java", "function":"lookupOrAddHostLocked"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2025-02-01"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/frameworks/base/+/047bc1ce62f84aa0bd5827b49edb330e1cc2da8b"}]}