{"id":"PUB-A-254929746","details":"In ufdt_local_fixup_prop of ufdt_overlay.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-254929746","CVE-2023-21025"],"modified":"2026-09-22T15:22:15.314525410Z","published":"2023-03-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2023-03-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/system/libufdt/+/46493e9936878b033ca4056486054ca8432a806e"}],"affected":[{"package":{"name":"platform/system/libufdt","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2023-03-01"}]}],"versions":["13"],"ecosystem_specific":{"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/system/libufdt/+/46493e9936878b033ca4056486054ca8432a806e","target":{"file":"ufdt_overlay.c","function":"ufdt_local_fixup_prop"},"deprecated":false,"digest":{"length":482,"function_hash":"83445948987897300240754641881235096391"},"id":"PUB-A-254929746-3a22330b","match_only_versions":["13"],"signature_type":"Function"},{"source":"https://android.googlesource.com/platform/system/libufdt/+/46493e9936878b033ca4056486054ca8432a806e","target":{"file":"ufdt_overlay.c"},"deprecated":false,"digest":{"line_hashes":["338459868016508155913313395018962205170","143462413828501220866184626190619013143","266259034738764482650499995524228752706","215492925351261466074253330892891276020","145845097986937595528203719582281728175","104127160348490296663840172429171757221","143629071633681430303148636477611262334"],"threshold":0.9},"id":"PUB-A-254929746-b9ab1d58","match_only_versions":["13"],"signature_type":"Line","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/system/libufdt/+/46493e9936878b033ca4056486054ca8432a806e"],"severity":"Moderate","spl":"2023-03-01","types":["ID"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-254929746.json"}}],"schema_version":"1.9.0"}