{"id":"ASB-A-269456018","details":"In convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-269456018","CVE-2023-21274"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2023-08-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2023-08-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/modules/NeuralNetworks/+/2bffd7f5e66dd0cf7e5668fb65c4f2b2e9f87cf7"}],"affected":[{"package":{"name":"platform/packages/modules/NeuralNetworks","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13-next:0"},{"fixed":"13-next:2023-08-01"}]}],"versions":["13-next"],"ecosystem_specific":{"severity":"High","spl":"2023-08-01","types":["ID"],"vanir_signatures":[{"deprecated":false,"digest":{"line_hashes":["176601635788391476565524033691199382557","326614349900514728878898230718069872568","225124754959809905925752443612499307428","78697356797215910034281392899615031347"],"threshold":0.9},"id":"ASB-A-269456018-2278b777","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/NeuralNetworks/+/da885e104c92c440b697834926ac4a772758d5c3","target":{"file":"shim_and_sl/ShimConverter.cpp"}}],"fixes":["https://android.googlesource.com/platform/packages/modules/NeuralNetworks/+/da885e104c92c440b697834926ac4a772758d5c3"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-269456018.json"}},{"package":{"name":"platform/packages/modules/NeuralNetworks","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2023-08-01"}]}],"versions":["12"],"ecosystem_specific":{"spl":"2023-08-01","types":["ID"],"vanir_signatures":[{"id":"ASB-A-269456018-b329623e","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/NeuralNetworks/+/d7007e8569f71f10ccc454804d46a948a1b0b8a5","target":{"file":"shim_and_sl/ShimConverter.cpp"},"deprecated":false,"digest":{"line_hashes":["176601635788391476565524033691199382557","326614349900514728878898230718069872568","225124754959809905925752443612499307428","78697356797215910034281392899615031347"],"threshold":0.9}}],"fixes":["https://android.googlesource.com/platform/packages/modules/NeuralNetworks/+/d7007e8569f71f10ccc454804d46a948a1b0b8a5"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-269456018.json"}},{"package":{"name":"platform/packages/modules/NeuralNetworks","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2023-08-01"}]}],"versions":["12L"],"ecosystem_specific":{"severity":"High","spl":"2023-08-01","types":["ID"],"vanir_signatures":[{"deprecated":false,"digest":{"line_hashes":["176601635788391476565524033691199382557","326614349900514728878898230718069872568","225124754959809905925752443612499307428","78697356797215910034281392899615031347"],"threshold":0.9},"id":"ASB-A-269456018-881d7f30","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/NeuralNetworks/+/b108bc94105b1a12f0fcf21bf7e13ccdee6e4efa","target":{"file":"shim_and_sl/ShimConverter.cpp"}}],"fixes":["https://android.googlesource.com/platform/packages/modules/NeuralNetworks/+/b108bc94105b1a12f0fcf21bf7e13ccdee6e4efa"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-269456018.json"}},{"package":{"name":"platform/packages/modules/NeuralNetworks","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2023-08-01"}]}],"versions":["13"],"ecosystem_specific":{"spl":"2023-08-01","types":["ID"],"vanir_signatures":[{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/NeuralNetworks/+/5d81dcf032155c2967f613629bb67f629f835636","target":{"file":"shim_and_sl/ShimConverter.cpp"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["176601635788391476565524033691199382557","326614349900514728878898230718069872568","225124754959809905925752443612499307428","78697356797215910034281392899615031347"]},"id":"ASB-A-269456018-33da6219"}],"fixes":["https://android.googlesource.com/platform/packages/modules/NeuralNetworks/+/5d81dcf032155c2967f613629bb67f629f835636"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-269456018.json"}}],"schema_version":"1.9.0"}