{"id":"PUB-A-259942964","details":"In setProfileName of DevicePolicyManagerService.java, there is a possible way to crash the SystemUI menu due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-259942964","CVE-2023-21167"],"modified":"2026-05-01T15:24:27.653932Z","published":"2023-06-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2023-06-01"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13-next:0"},{"fixed":"13-next:2023-06-01"}]}],"versions":["13-next"],"ecosystem_specific":{"spl":"2023-06-01","fixes":["https://android.googlesource.com/platform/frameworks/base/+/189b1157bd751e9fa01e4084c91f703c8f4af642"],"severity":"Moderate","types":["DoS"],"vanir_signatures":[{"signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["261632806508549377328375700223001763684","72071718042071190986683616560344911631","249579893198889923221703755640549339828","32977824350968205327085866770411269575","207985399631430165261605392140189796283","302998431240077100762269125275940416996","40645136330168600440795433057896396955","112184475321408415755340114980368957769"]},"target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/189b1157bd751e9fa01e4084c91f703c8f4af642","deprecated":false,"signature_type":"Line","id":"PUB-A-259942964-aa9e8bc1"},{"digest":{"function_hash":"336160652653341782677047496187658732973","length":434},"deprecated":false,"match_only_versions":["13-next"],"id":"PUB-A-259942964-f1f1232a","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/189b1157bd751e9fa01e4084c91f703c8f4af642","target":{"function":"setProfileName","file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"},"signature_type":"Function"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-259942964.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2023-06-01"}]}],"versions":["13"],"ecosystem_specific":{"spl":"2023-06-01","fixes":["https://android.googlesource.com/platform/frameworks/base/+/189b1157bd751e9fa01e4084c91f703c8f4af642"],"severity":"Moderate","types":["DoS"],"vanir_signatures":[{"signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["261632806508549377328375700223001763684","72071718042071190986683616560344911631","249579893198889923221703755640549339828","32977824350968205327085866770411269575","207985399631430165261605392140189796283","302998431240077100762269125275940416996","40645136330168600440795433057896396955","112184475321408415755340114980368957769"]},"target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/189b1157bd751e9fa01e4084c91f703c8f4af642","deprecated":false,"signature_type":"Line","id":"PUB-A-259942964-260ad326"},{"digest":{"function_hash":"336160652653341782677047496187658732973","length":434},"deprecated":false,"match_only_versions":["13"],"id":"PUB-A-259942964-85a857f8","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/189b1157bd751e9fa01e4084c91f703c8f4af642","target":{"function":"setProfileName","file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"},"signature_type":"Function"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-259942964.json"}}],"schema_version":"1.7.5"}