{"id":"ASB-A-269455813","details":"In parseInputs of ShimPreparedModel.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-269455813","CVE-2023-21271"],"modified":"2026-05-22T15:55:21.353668239Z","published":"2023-08-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2023-08-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/modules/NeuralNetworks/+/e44e1064ccec2aa09fc66bd750d66919129ae6b4"}],"affected":[{"package":{"name":"platform/packages/modules/NeuralNetworks","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13-next:0"},{"fixed":"13-next:2023-08-01"}]}],"versions":["13-next"],"ecosystem_specific":{"vanir_signatures":[{"source":"https://android.googlesource.com/platform/packages/modules/NeuralNetworks/+/79024562d2cce3f2dc6a3340301d65251497dd83","deprecated":false,"digest":{"line_hashes":["133517263624627152021180462775993243955","120118863474742087825896320033900196726","313789544138700295684605181280235562304","30262238391531682495442564558807011361","284844929156171403640195441884753635955","192812171998338839540696107886823633161","216976616578596516229817424449038290274"],"threshold":0.9},"target":{"file":"shim_and_sl/ShimPreparedModel.cpp"},"signature_version":"v1","id":"ASB-A-269455813-4684bbfc","signature_type":"Line"}],"types":["ID"],"spl":"2023-08-01","fixes":["https://android.googlesource.com/platform/packages/modules/NeuralNetworks/+/79024562d2cce3f2dc6a3340301d65251497dd83"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-269455813.json"}},{"package":{"name":"platform/packages/modules/NeuralNetworks","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2023-08-01"}]}],"versions":["12"],"ecosystem_specific":{"vanir_signatures":[{"source":"https://android.googlesource.com/platform/packages/modules/NeuralNetworks/+/e7ce2bdba52a516aa41276f94447729d6412e082","deprecated":false,"digest":{"line_hashes":["286461733144079132600206748818376505910","338048205177064937780261167548284088023","313789544138700295684605181280235562304","30262238391531682495442564558807011361","284844929156171403640195441884753635955","192812171998338839540696107886823633161","216976616578596516229817424449038290274"],"threshold":0.9},"target":{"file":"shim_and_sl/ShimPreparedModel.cpp"},"signature_version":"v1","id":"ASB-A-269455813-bc85ca3e","signature_type":"Line"}],"types":["ID"],"spl":"2023-08-01","fixes":["https://android.googlesource.com/platform/packages/modules/NeuralNetworks/+/e7ce2bdba52a516aa41276f94447729d6412e082"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-269455813.json"}},{"package":{"name":"platform/packages/modules/NeuralNetworks","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2023-08-01"}]}],"versions":["12L"],"ecosystem_specific":{"vanir_signatures":[{"digest":{"line_hashes":["286461733144079132600206748818376505910","338048205177064937780261167548284088023","313789544138700295684605181280235562304","30262238391531682495442564558807011361","284844929156171403640195441884753635955","192812171998338839540696107886823633161","216976616578596516229817424449038290274"],"threshold":0.9},"deprecated":false,"target":{"file":"shim_and_sl/ShimPreparedModel.cpp"},"source":"https://android.googlesource.com/platform/packages/modules/NeuralNetworks/+/3147c3ef6bcb6ee0fa8959726cb593e5d6ab17b8","signature_version":"v1","id":"ASB-A-269455813-6220c8ac","signature_type":"Line"}],"types":["ID"],"spl":"2023-08-01","fixes":["https://android.googlesource.com/platform/packages/modules/NeuralNetworks/+/3147c3ef6bcb6ee0fa8959726cb593e5d6ab17b8"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-269455813.json"}},{"package":{"name":"platform/packages/modules/NeuralNetworks","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2023-08-01"}]}],"versions":["13"],"ecosystem_specific":{"types":["ID"],"vanir_signatures":[{"digest":{"line_hashes":["133517263624627152021180462775993243955","120118863474742087825896320033900196726","313789544138700295684605181280235562304","30262238391531682495442564558807011361","284844929156171403640195441884753635955","192812171998338839540696107886823633161","216976616578596516229817424449038290274"],"threshold":0.9},"deprecated":false,"source":"https://android.googlesource.com/platform/packages/modules/NeuralNetworks/+/553bc285b36b6312b24087bd085f12620028fac8","signature_version":"v1","target":{"file":"shim_and_sl/ShimPreparedModel.cpp"},"id":"ASB-A-269455813-f16f9d4b","signature_type":"Line"}],"spl":"2023-08-01","fixes":["https://android.googlesource.com/platform/packages/modules/NeuralNetworks/+/553bc285b36b6312b24087bd085f12620028fac8"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-269455813.json"}}],"schema_version":"1.7.5"}