CVE-2021-39624: Denial of Service in platform/frameworks/base
Summary
CVE-2021-39624: In freeStageDirs PackageInstallerService.java, there is a possible permanent denial of service due to resource exhaustion. Affects platform/frameworks/base across 3 version ranges.
>= 11:0, < 11:2022-10-01
>= 12:0, < 12:2022-10-01
>= 12L:0, < 12L:2022-10-01
Fixed in 11:2022-10-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The package platform/frameworks/base is a part of the Android ecosystem and is responsible for providing core functionalities and services to the Android operating system. It includes various components and libraries that are essential for the proper functioning of the system. However, a vulnerability has been identified in the freeStageDirs PackageInstallerService.java file, which can lead to a permanent denial of service due to resource exhaustion. This vulnerability requires user execution privileges but does not require any user interaction for exploitation.
Vulnerability Detail
The vulnerability in the freeStageDirs PackageInstallerService.java file can result in a local denial of service attack. By exploiting this vulnerability, an attacker can exhaust system resources, leading to a permanent denial of service condition. This can severely impact the affected device's performance and stability. The vulnerability affects Android versions 11, 12, and 12L. The severity of this vulnerability is classified as high.
How To Fix
Minimum fixed version
11:2022-10-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No specific workaround has been mentioned for this vulnerability.
Conclusion
The vulnerability in the platform/frameworks/base package can lead to a permanent denial of service condition on affected Android devices. It is crucial to apply the provided fix from the official Android source repository and keep the devices updated with the latest security patches. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for platform/frameworks/base →
FAQ
This vulnerability can result in a permanent denial of service condition on the affected device, severely impacting its performance and stability.
User execution privileges are required to exploit this vulnerability.
No, user interaction is not needed for exploitation of this vulnerability.
This vulnerability affects Android versions 11, 12, and 12L.
The severity of this vulnerability is classified as high.
Related vulnerabilities
Recent vulnerabilities recorded for platform/frameworks/base.
