{"id":"PUB-A-237672190","details":"In onContextItemSelected of NetworkProviderSettings.java, there is a possible way for users to change the Wi-Fi settings of other users due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-237672190","CVE-2023-21001"],"modified":"2026-04-08T15:00:25.631816Z","published":"2023-03-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2023-03-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/apps/Settings/+/dcfbccbfbc14df312f7fd60e33e50626112a80e3"}],"affected":[{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2023-03-01"}]}],"versions":["13"],"ecosystem_specific":{"vanir_signatures":[{"signature_type":"Function","match_only_versions":["13"],"digest":{"function_hash":"85931917528647656650393916058361756571","length":576},"deprecated":false,"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/dcfbccbfbc14df312f7fd60e33e50626112a80e3","id":"PUB-A-237672190-0117d4ff","target":{"file":"src/com/android/settings/network/NetworkProviderSettings.java","function":"onContextItemSelected"},"signature_version":"v1"},{"signature_type":"Function","match_only_versions":["13"],"digest":{"function_hash":"18085920037116847978295049589634668536","length":974},"deprecated":false,"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/dcfbccbfbc14df312f7fd60e33e50626112a80e3","id":"PUB-A-237672190-42ef2862","target":{"file":"src/com/android/settings/network/NetworkProviderSettings.java","function":"onCreateContextMenu"},"signature_version":"v1"},{"signature_type":"Line","match_only_versions":["13"],"digest":{"threshold":0.9,"line_hashes":["72759330091169440706046299701103761556","251969557952653459090559889600811404176","320646116583179365368294083563730213317","101929945630366683448370742427132922943","148464962656289052051106198863838348353","77905500661677139232236866300303702674","71703739065708909952415041836772721085","209282554524430241113028537215243358836","236312533297466339603767855946449744476","301454096643885133867361433275108265674","81204061339564732056355095932318258971","86006563549833263809889335741260054671","92173793544998893813557468613625537171","314326959141032461913909579284862231984","139903985332960735288290740659866315909","109322724378208407728212352092235957599","89754640269905572923715566238785842771","329913307834130087282650055430470414456"]},"deprecated":false,"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/dcfbccbfbc14df312f7fd60e33e50626112a80e3","id":"PUB-A-237672190-954592b7","target":{"file":"src/com/android/settings/network/NetworkProviderSettings.java"},"signature_version":"v1"}],"types":["EoP"],"severity":"Moderate","fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/dcfbccbfbc14df312f7fd60e33e50626112a80e3"],"spl":"2023-03-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-237672190.json"}}],"schema_version":"1.7.5"}