{"id":"ASB-A-172937525","details":"In p2p_copy_client_info of p2p.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution if the target device is performing a Wi-Fi Direct search, with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-172937525","CVE-2021-0326"],"modified":"2026-05-22T15:55:21.353668239Z","published":"2021-02-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2021-02-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/external/wpa_supplicant_8/+/0b60cb210510c68871c8d735285bc4915de3bd80"}],"affected":[{"package":{"name":"platform/external/wpa_supplicant_8","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0:0"},{"fixed":"8.0:2021-02-01"}]}],"versions":["8.0"],"ecosystem_specific":{"spl":"2021-02-01","severity":"Critical","vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/external/wpa_supplicant_8/+/0b60cb210510c68871c8d735285bc4915de3bd80","signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["27953088862501608363902232068580082871","239874137859324499201315692976508883353","133419836234293689097076431483329205039","91759737128570643652395725378764883923","41591529171382063936714124977847515994"]},"deprecated":false,"target":{"file":"src/p2p/p2p.c"},"id":"ASB-A-172937525-679dcf59"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/external/wpa_supplicant_8/+/0b60cb210510c68871c8d735285bc4915de3bd80","signature_type":"Function","digest":{"length":566,"function_hash":"100878999754899109193204500004704371025"},"deprecated":false,"target":{"file":"src/p2p/p2p.c","function":"p2p_copy_client_info"},"id":"ASB-A-172937525-c0500ad4"}],"types":["RCE"],"fixes":["https://android.googlesource.com/platform/external/wpa_supplicant_8/+/0b60cb210510c68871c8d735285bc4915de3bd80"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-172937525.json"}},{"package":{"name":"platform/external/wpa_supplicant_8","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.1:0"},{"fixed":"8.1:2021-02-01"}]}],"versions":["8.1"],"ecosystem_specific":{"spl":"2021-02-01","severity":"Critical","vanir_signatures":[{"signature_type":"Line","source":"https://android.googlesource.com/platform/external/wpa_supplicant_8/+/0b60cb210510c68871c8d735285bc4915de3bd80","target":{"file":"src/p2p/p2p.c"},"digest":{"threshold":0.9,"line_hashes":["27953088862501608363902232068580082871","239874137859324499201315692976508883353","133419836234293689097076431483329205039","91759737128570643652395725378764883923","41591529171382063936714124977847515994"]},"deprecated":false,"signature_version":"v1","id":"ASB-A-172937525-012af784"},{"signature_type":"Function","source":"https://android.googlesource.com/platform/external/wpa_supplicant_8/+/0b60cb210510c68871c8d735285bc4915de3bd80","target":{"file":"src/p2p/p2p.c","function":"p2p_copy_client_info"},"digest":{"length":566,"function_hash":"100878999754899109193204500004704371025"},"deprecated":false,"signature_version":"v1","id":"ASB-A-172937525-17f35892"}],"types":["RCE"],"fixes":["https://android.googlesource.com/platform/external/wpa_supplicant_8/+/0b60cb210510c68871c8d735285bc4915de3bd80"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-172937525.json"}},{"package":{"name":"platform/external/wpa_supplicant_8","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9:0"},{"fixed":"9:2021-02-01"}]}],"versions":["9"],"ecosystem_specific":{"spl":"2021-02-01","severity":"Critical","types":["RCE"],"vanir_signatures":[{"target":{"file":"src/p2p/p2p.c","function":"p2p_copy_client_info"},"source":"https://android.googlesource.com/platform/external/wpa_supplicant_8/+/0b60cb210510c68871c8d735285bc4915de3bd80","signature_version":"v1","digest":{"length":566,"function_hash":"100878999754899109193204500004704371025"},"deprecated":false,"signature_type":"Function","id":"ASB-A-172937525-05ec0ea0"},{"signature_type":"Line","source":"https://android.googlesource.com/platform/external/wpa_supplicant_8/+/0b60cb210510c68871c8d735285bc4915de3bd80","target":{"file":"src/p2p/p2p.c"},"digest":{"threshold":0.9,"line_hashes":["27953088862501608363902232068580082871","239874137859324499201315692976508883353","133419836234293689097076431483329205039","91759737128570643652395725378764883923","41591529171382063936714124977847515994"]},"deprecated":false,"signature_version":"v1","id":"ASB-A-172937525-7188901b"}],"fixes":["https://android.googlesource.com/platform/external/wpa_supplicant_8/+/0b60cb210510c68871c8d735285bc4915de3bd80"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-172937525.json"}},{"package":{"name":"platform/external/wpa_supplicant_8","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2021-02-01"}]}],"versions":["10"],"ecosystem_specific":{"spl":"2021-02-01","severity":"Critical","vanir_signatures":[{"target":{"file":"src/p2p/p2p.c","function":"p2p_copy_client_info"},"source":"https://android.googlesource.com/platform/external/wpa_supplicant_8/+/0b60cb210510c68871c8d735285bc4915de3bd80","signature_version":"v1","digest":{"length":566,"function_hash":"100878999754899109193204500004704371025"},"deprecated":false,"signature_type":"Function","id":"ASB-A-172937525-276db8a2"},{"target":{"file":"src/p2p/p2p.c"},"source":"https://android.googlesource.com/platform/external/wpa_supplicant_8/+/0b60cb210510c68871c8d735285bc4915de3bd80","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["27953088862501608363902232068580082871","239874137859324499201315692976508883353","133419836234293689097076431483329205039","91759737128570643652395725378764883923","41591529171382063936714124977847515994"]},"deprecated":false,"signature_type":"Line","id":"ASB-A-172937525-bcd20c16"}],"types":["RCE"],"fixes":["https://android.googlesource.com/platform/external/wpa_supplicant_8/+/0b60cb210510c68871c8d735285bc4915de3bd80"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-172937525.json"}},{"package":{"name":"platform/external/wpa_supplicant_8","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2021-02-01"}]}],"versions":["11"],"ecosystem_specific":{"spl":"2021-02-01","severity":"Critical","vanir_signatures":[{"signature_type":"Line","source":"https://android.googlesource.com/platform/external/wpa_supplicant_8/+/0b60cb210510c68871c8d735285bc4915de3bd80","target":{"file":"src/p2p/p2p.c"},"digest":{"threshold":0.9,"line_hashes":["27953088862501608363902232068580082871","239874137859324499201315692976508883353","133419836234293689097076431483329205039","91759737128570643652395725378764883923","41591529171382063936714124977847515994"]},"deprecated":false,"signature_version":"v1","id":"ASB-A-172937525-5eb6c528"},{"signature_type":"Function","source":"https://android.googlesource.com/platform/external/wpa_supplicant_8/+/0b60cb210510c68871c8d735285bc4915de3bd80","target":{"file":"src/p2p/p2p.c","function":"p2p_copy_client_info"},"digest":{"length":566,"function_hash":"100878999754899109193204500004704371025"},"deprecated":false,"signature_version":"v1","id":"ASB-A-172937525-ce15f42c"}],"types":["RCE"],"fixes":["https://android.googlesource.com/platform/external/wpa_supplicant_8/+/0b60cb210510c68871c8d735285bc4915de3bd80"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-172937525.json"}}],"schema_version":"1.7.5"}