{"id":"PUB-A-216854451","details":"In multiple functions of PasspointXmlUtils.java, there is a possible authentication misconfiguration due to a logic error in the code. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-216854451","CVE-2023-21027"],"modified":"2026-04-23T15:15:38.048727Z","published":"2023-06-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2023-06-01"}],"affected":[{"package":{"name":"platform/packages/modules/Wifi","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13-next:0"},{"fixed":"13-next:2023-06-01"}]}],"versions":["13-next"],"ecosystem_specific":{"vanir_signatures":[{"id":"PUB-A-216854451-0ee320f6","signature_version":"v1","match_only_versions":["13-next"],"deprecated":false,"digest":{"length":1286,"function_hash":"290083469651611543641535717210570863213"},"signature_type":"Function","target":{"file":"service/java/com/android/server/wifi/hotspot2/PasspointXmlUtils.java","function":"deserializePolicy"},"source":"https://android.googlesource.com/platform/packages/modules/Wifi/+/158a00b8973e280fda3a0b420851fb494f923860"},{"deprecated":false,"signature_type":"Line","target":{"file":"service/java/com/android/server/wifi/hotspot2/PasspointXmlUtils.java"},"id":"PUB-A-216854451-5e0015bc","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["80174087436758236836633457326330647065","315557012437673220810170157829419773944","301385060467560043398397990722610370856","115739237687785886848908767807691157515","63695100080596095375337861902670672563","121098488946366830996809607655192568915","285988519702346610045952736025790338789","280622283352007523235683680912340324035","253089557106518564555261960984861949363","227367220444911390396070512751436239335","59143366346620065050042048586272795047","118173766236620493576320029797475905769","227847672123788177483756528120166986943","3090994782136786573567402060798570356","167243309084936810434439082600877604638","215129471312705931988852348187526453998","83055688117071382997784699814498150144","238958499073310950219022397178267679835","71572441296608240305097661242713265465","287731953104111839472648725402721685802","167596000910703945951307011053458695824","188731101596687566837292533300557503996","247642894784488526975404966138965032068","300642125776832568512019389609116095372","322953454088348774032793132760638163660","298514292180236636875112884198215194537","202116351576427481889349324510218847077","123597671927639230484722658225077640666","309568861459555850584600889051332351238","314655280530855758434467260714487572544","142659709993933835882777418366530410982","336540310958305603432945212540498685390","182393571753960262733207070877519518143","38653323698627272467704529792665212001","37059332074870918395846449027605737205","266734671078492768984157423694939069984","249562441687446261901722301208918497845","243938404306532199996791886626149415257","299228430552300169432605474744186055788","173301297249271223641877064450837725810","6163961323942528898352621864135301069","131346005240135564575847113580151110583","26330445536564963792937722642781610816","76860649540595415916151753659913930420","220833793932630887661018849451212401783","50105821393706996249897848655091213053","229872452643955686559140138921089418416","238609066222050234973341281651682294259","240678954950221386416726410069431672207","29175832530981595282426051103757348054","109377290492715176436672637007207458707","307898045676248430734406054747620043376","262152438234714560176060529705787405791","99654169249552239078387129230010893741","188674091995815470687889951715607628715","307898045676248430734406054747620043376","262152438234714560176060529705787405791","99654169249552239078387129230010893741","193191864934769792685624442161329974419","173863535553332407937529653365809756445","22309715391212230544726586966297797155","152928562907443805486329981967789708572","13357947761068271709597049378851317179","139890190588514976250298243091408178272","82417286377279080061742580756041220322","333528805170256890067798953547068215271","227641793745921647221028696693912789345","232894142175507409247604278581513295684","139091353555289288926415529588302914090"]},"source":"https://android.googlesource.com/platform/packages/modules/Wifi/+/158a00b8973e280fda3a0b420851fb494f923860"},{"id":"PUB-A-216854451-8810c978","signature_version":"v1","match_only_versions":["13-next"],"deprecated":false,"digest":{"length":567,"function_hash":"52752624064682749376500859253461337132"},"signature_type":"Function","target":{"file":"service/java/com/android/server/wifi/hotspot2/PasspointXmlUtils.java","function":"deserializeSimCredential"},"source":"https://android.googlesource.com/platform/packages/modules/Wifi/+/158a00b8973e280fda3a0b420851fb494f923860"},{"id":"PUB-A-216854451-a587e534","signature_version":"v1","match_only_versions":["13-next"],"deprecated":false,"digest":{"length":710,"function_hash":"182753916842289381611868904052598074696"},"signature_type":"Function","target":{"file":"service/java/com/android/server/wifi/hotspot2/PasspointXmlUtils.java","function":"deserializeRoamingPartner"},"source":"https://android.googlesource.com/platform/packages/modules/Wifi/+/158a00b8973e280fda3a0b420851fb494f923860"},{"deprecated":false,"signature_type":"Function","target":{"file":"service/java/com/android/server/wifi/hotspot2/PasspointXmlUtils.java","function":"serializePasspointConfiguration"},"id":"PUB-A-216854451-b7686ee1","signature_version":"v1","digest":{"length":2208,"function_hash":"123113811758316236708212613481056450575"},"source":"https://android.googlesource.com/platform/packages/modules/Wifi/+/158a00b8973e280fda3a0b420851fb494f923860"},{"id":"PUB-A-216854451-b9099960","signature_version":"v1","match_only_versions":["13-next"],"deprecated":false,"digest":{"length":587,"function_hash":"112712254450955274497604528555314796884"},"signature_type":"Function","target":{"file":"service/java/com/android/server/wifi/hotspot2/PasspointXmlUtils.java","function":"deserializeCertCredential"},"source":"https://android.googlesource.com/platform/packages/modules/Wifi/+/158a00b8973e280fda3a0b420851fb494f923860"},{"id":"PUB-A-216854451-bba5cee9","signature_version":"v1","match_only_versions":["13-next"],"deprecated":false,"digest":{"length":1140,"function_hash":"182732029842243877911585727291507264491"},"signature_type":"Function","target":{"file":"service/java/com/android/server/wifi/hotspot2/PasspointXmlUtils.java","function":"deserializeCredential"},"source":"https://android.googlesource.com/platform/packages/modules/Wifi/+/158a00b8973e280fda3a0b420851fb494f923860"},{"id":"PUB-A-216854451-bc2c76d8","signature_version":"v1","match_only_versions":["13-next"],"deprecated":false,"digest":{"length":1008,"function_hash":"95194227724841036392789317959963487492"},"signature_type":"Function","target":{"file":"service/java/com/android/server/wifi/hotspot2/PasspointXmlUtils.java","function":"deserializeHomeSP"},"source":"https://android.googlesource.com/platform/packages/modules/Wifi/+/158a00b8973e280fda3a0b420851fb494f923860"},{"id":"PUB-A-216854451-d112359e","signature_version":"v1","match_only_versions":["13-next"],"deprecated":false,"digest":{"length":1028,"function_hash":"7786805147639718474554709940206759985"},"signature_type":"Function","target":{"file":"service/java/com/android/server/wifi/hotspot2/PasspointXmlUtils.java","function":"deserializeUpdateParameter"},"source":"https://android.googlesource.com/platform/packages/modules/Wifi/+/158a00b8973e280fda3a0b420851fb494f923860"},{"id":"PUB-A-216854451-d6e367a0","signature_version":"v1","match_only_versions":["13-next"],"deprecated":false,"digest":{"length":936,"function_hash":"76573239701341361713818732764671800785"},"signature_type":"Function","target":{"file":"service/java/com/android/server/wifi/hotspot2/PasspointXmlUtils.java","function":"deserializeUserCredential"},"source":"https://android.googlesource.com/platform/packages/modules/Wifi/+/158a00b8973e280fda3a0b420851fb494f923860"},{"deprecated":false,"signature_type":"Function","target":{"file":"service/java/com/android/server/wifi/hotspot2/PasspointXmlUtils.java","function":"deserializePasspointConfiguration"},"id":"PUB-A-216854451-e1398f7f","signature_version":"v1","digest":{"length":2676,"function_hash":"168198516192563373035251530177287063856"},"source":"https://android.googlesource.com/platform/packages/modules/Wifi/+/158a00b8973e280fda3a0b420851fb494f923860"}],"fixes":["https://android.googlesource.com/platform/packages/modules/Wifi/+/158a00b8973e280fda3a0b420851fb494f923860"],"spl":"2023-06-01","types":["ID"],"severity":"Moderate"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-216854451.json"}},{"package":{"name":"platform/packages/modules/Wifi","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2023-06-01"}]}],"versions":["13"],"ecosystem_specific":{"vanir_signatures":[{"id":"PUB-A-216854451-66def60d","signature_version":"v1","match_only_versions":["13"],"deprecated":false,"digest":{"length":567,"function_hash":"52752624064682749376500859253461337132"},"signature_type":"Function","target":{"file":"service/java/com/android/server/wifi/hotspot2/PasspointXmlUtils.java","function":"deserializeSimCredential"},"source":"https://android.googlesource.com/platform/packages/modules/Wifi/+/158a00b8973e280fda3a0b420851fb494f923860"},{"id":"PUB-A-216854451-7139bc32","signature_version":"v1","match_only_versions":["13"],"deprecated":false,"digest":{"length":1286,"function_hash":"290083469651611543641535717210570863213"},"signature_type":"Function","target":{"file":"service/java/com/android/server/wifi/hotspot2/PasspointXmlUtils.java","function":"deserializePolicy"},"source":"https://android.googlesource.com/platform/packages/modules/Wifi/+/158a00b8973e280fda3a0b420851fb494f923860"},{"deprecated":false,"signature_type":"Function","target":{"file":"service/java/com/android/server/wifi/hotspot2/PasspointXmlUtils.java","function":"deserializePasspointConfiguration"},"id":"PUB-A-216854451-73dd20d7","signature_version":"v1","digest":{"length":2676,"function_hash":"168198516192563373035251530177287063856"},"source":"https://android.googlesource.com/platform/packages/modules/Wifi/+/158a00b8973e280fda3a0b420851fb494f923860"},{"deprecated":false,"signature_type":"Function","target":{"file":"service/java/com/android/server/wifi/hotspot2/PasspointXmlUtils.java","function":"serializePasspointConfiguration"},"id":"PUB-A-216854451-95bf750c","signature_version":"v1","digest":{"length":2208,"function_hash":"123113811758316236708212613481056450575"},"source":"https://android.googlesource.com/platform/packages/modules/Wifi/+/158a00b8973e280fda3a0b420851fb494f923860"},{"id":"PUB-A-216854451-abb0536e","signature_version":"v1","match_only_versions":["13"],"deprecated":false,"digest":{"length":1028,"function_hash":"7786805147639718474554709940206759985"},"signature_type":"Function","target":{"file":"service/java/com/android/server/wifi/hotspot2/PasspointXmlUtils.java","function":"deserializeUpdateParameter"},"source":"https://android.googlesource.com/platform/packages/modules/Wifi/+/158a00b8973e280fda3a0b420851fb494f923860"},{"id":"PUB-A-216854451-bb3112fc","signature_version":"v1","match_only_versions":["13"],"deprecated":false,"digest":{"length":936,"function_hash":"76573239701341361713818732764671800785"},"signature_type":"Function","target":{"file":"service/java/com/android/server/wifi/hotspot2/PasspointXmlUtils.java","function":"deserializeUserCredential"},"source":"https://android.googlesource.com/platform/packages/modules/Wifi/+/158a00b8973e280fda3a0b420851fb494f923860"},{"id":"PUB-A-216854451-c4f0bb79","signature_version":"v1","match_only_versions":["13"],"deprecated":false,"digest":{"length":587,"function_hash":"112712254450955274497604528555314796884"},"signature_type":"Function","target":{"file":"service/java/com/android/server/wifi/hotspot2/PasspointXmlUtils.java","function":"deserializeCertCredential"},"source":"https://android.googlesource.com/platform/packages/modules/Wifi/+/158a00b8973e280fda3a0b420851fb494f923860"},{"id":"PUB-A-216854451-cee9cc6a","signature_version":"v1","match_only_versions":["13"],"deprecated":false,"digest":{"length":1008,"function_hash":"95194227724841036392789317959963487492"},"signature_type":"Function","target":{"file":"service/java/com/android/server/wifi/hotspot2/PasspointXmlUtils.java","function":"deserializeHomeSP"},"source":"https://android.googlesource.com/platform/packages/modules/Wifi/+/158a00b8973e280fda3a0b420851fb494f923860"},{"deprecated":false,"signature_type":"Line","target":{"file":"service/java/com/android/server/wifi/hotspot2/PasspointXmlUtils.java"},"id":"PUB-A-216854451-da9ff33d","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["80174087436758236836633457326330647065","315557012437673220810170157829419773944","301385060467560043398397990722610370856","115739237687785886848908767807691157515","63695100080596095375337861902670672563","121098488946366830996809607655192568915","285988519702346610045952736025790338789","280622283352007523235683680912340324035","253089557106518564555261960984861949363","227367220444911390396070512751436239335","59143366346620065050042048586272795047","118173766236620493576320029797475905769","227847672123788177483756528120166986943","3090994782136786573567402060798570356","167243309084936810434439082600877604638","215129471312705931988852348187526453998","83055688117071382997784699814498150144","238958499073310950219022397178267679835","71572441296608240305097661242713265465","287731953104111839472648725402721685802","167596000910703945951307011053458695824","188731101596687566837292533300557503996","247642894784488526975404966138965032068","300642125776832568512019389609116095372","322953454088348774032793132760638163660","298514292180236636875112884198215194537","202116351576427481889349324510218847077","123597671927639230484722658225077640666","309568861459555850584600889051332351238","314655280530855758434467260714487572544","142659709993933835882777418366530410982","336540310958305603432945212540498685390","182393571753960262733207070877519518143","38653323698627272467704529792665212001","37059332074870918395846449027605737205","266734671078492768984157423694939069984","249562441687446261901722301208918497845","243938404306532199996791886626149415257","299228430552300169432605474744186055788","173301297249271223641877064450837725810","6163961323942528898352621864135301069","131346005240135564575847113580151110583","26330445536564963792937722642781610816","76860649540595415916151753659913930420","220833793932630887661018849451212401783","50105821393706996249897848655091213053","229872452643955686559140138921089418416","238609066222050234973341281651682294259","240678954950221386416726410069431672207","29175832530981595282426051103757348054","109377290492715176436672637007207458707","307898045676248430734406054747620043376","262152438234714560176060529705787405791","99654169249552239078387129230010893741","188674091995815470687889951715607628715","307898045676248430734406054747620043376","262152438234714560176060529705787405791","99654169249552239078387129230010893741","193191864934769792685624442161329974419","173863535553332407937529653365809756445","22309715391212230544726586966297797155","152928562907443805486329981967789708572","13357947761068271709597049378851317179","139890190588514976250298243091408178272","82417286377279080061742580756041220322","333528805170256890067798953547068215271","227641793745921647221028696693912789345","232894142175507409247604278581513295684","139091353555289288926415529588302914090"]},"source":"https://android.googlesource.com/platform/packages/modules/Wifi/+/158a00b8973e280fda3a0b420851fb494f923860"},{"id":"PUB-A-216854451-f6ea8607","signature_version":"v1","match_only_versions":["13"],"deprecated":false,"digest":{"length":710,"function_hash":"182753916842289381611868904052598074696"},"signature_type":"Function","target":{"file":"service/java/com/android/server/wifi/hotspot2/PasspointXmlUtils.java","function":"deserializeRoamingPartner"},"source":"https://android.googlesource.com/platform/packages/modules/Wifi/+/158a00b8973e280fda3a0b420851fb494f923860"},{"id":"PUB-A-216854451-fd314629","signature_version":"v1","match_only_versions":["13"],"deprecated":false,"digest":{"length":1140,"function_hash":"182732029842243877911585727291507264491"},"signature_type":"Function","target":{"file":"service/java/com/android/server/wifi/hotspot2/PasspointXmlUtils.java","function":"deserializeCredential"},"source":"https://android.googlesource.com/platform/packages/modules/Wifi/+/158a00b8973e280fda3a0b420851fb494f923860"}],"fixes":["https://android.googlesource.com/platform/packages/modules/Wifi/+/158a00b8973e280fda3a0b420851fb494f923860"],"spl":"2023-06-01","types":["ID"],"severity":"Moderate"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-216854451.json"}}],"schema_version":"1.7.5"}