Medium · 6.2 CVE-2024-31314 EUVD-2024-29210GHSA-fpf6-89pc-p29r

In multiple functions of ShortcutService.java, there is a possible persistent DOS due to resource exhaustion. This could lead to local deni…

Published Jul 9, 2024 · Updated Nov 5, 2024 · Assigned by google_android

Vendor: Google Product: Android Platform: Android

Description

In multiple functions of ShortcutService.java, there is a possible persistent DOS due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

Vendor	Product	Affected	Fixed
Google	Android	14, 13, 12L, 12	—

Advisories 1

WID-SEC-2024-1278 Android Patchday - June 2024: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 2, 2026

References

https://android.googlesource.com/platform/frameworks/base/+/c0d5f75e01308fb7d6d86639a0a6e2ff81b30be6
https://source.android.com/security/bulletin/2024-06-01