{"id":"PUB-A-262741858","details":"In multiple methods of DataUsageList.java, there is a possible way to learn about admin user's network activities due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-262741858","CVE-2023-21173"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2023-06-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2023-06-01"}],"affected":[{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13-next:0"},{"fixed":"13-next:2023-06-01"}]}],"versions":["13-next"],"ecosystem_specific":{"types":["ID"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/6e79778d3c554afa5b1586bceafdc2371a43f0d2","target":{"file":"src/com/android/settings/datausage/DataUsageList.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["32569975141686479981003098960280478356","173127936186801694195578711140485522282","97090324050850964667667642118603124579","174389673978059839694261603135996925531","233102936650294469795631145664821824925","221103839380331961422545687406576898947","230292310052077115710237894845570001739","118739222446852367311009387548311386765","278333887146769260561566951056405409100","153751349014364299696892701890372424824","112083166659703119651072135480952851833","323311542422114565825366049405899249337","315772537612822080025407691066257486907","317299657746041441650624568340216412263","112542688482582407366777557322775717439"]},"id":"PUB-A-262741858-093275b1","signature_type":"Line"},{"deprecated":false,"digest":{"function_hash":"34249184479794743587955506957943658487","length":547},"id":"PUB-A-262741858-8251f28b","match_only_versions":["13-next"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/6e79778d3c554afa5b1586bceafdc2371a43f0d2","target":{"function":"onCreate","file":"src/com/android/settings/datausage/DataUsageList.java"}},{"target":{"file":"src/com/android/settings/datausage/DataUsageList.java","function":"onDestroy"},"deprecated":false,"digest":{"length":109,"function_hash":"5939660192206848247674928364732144859"},"id":"PUB-A-262741858-ed37da89","match_only_versions":["13-next"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/6e79778d3c554afa5b1586bceafdc2371a43f0d2"}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/6e79778d3c554afa5b1586bceafdc2371a43f0d2"],"severity":"Moderate","spl":"2023-06-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-262741858.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2023-06-01"}]}],"versions":["13"],"ecosystem_specific":{"vanir_signatures":[{"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/6e79778d3c554afa5b1586bceafdc2371a43f0d2","target":{"file":"src/com/android/settings/datausage/DataUsageList.java","function":"onDestroy"},"deprecated":false,"digest":{"function_hash":"5939660192206848247674928364732144859","length":109},"id":"PUB-A-262741858-8e914469","match_only_versions":["13"],"signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/6e79778d3c554afa5b1586bceafdc2371a43f0d2","target":{"file":"src/com/android/settings/datausage/DataUsageList.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["32569975141686479981003098960280478356","173127936186801694195578711140485522282","97090324050850964667667642118603124579","174389673978059839694261603135996925531","233102936650294469795631145664821824925","221103839380331961422545687406576898947","230292310052077115710237894845570001739","118739222446852367311009387548311386765","278333887146769260561566951056405409100","153751349014364299696892701890372424824","112083166659703119651072135480952851833","323311542422114565825366049405899249337","315772537612822080025407691066257486907","317299657746041441650624568340216412263","112542688482582407366777557322775717439"]},"id":"PUB-A-262741858-92ee40d6","signature_type":"Line"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/6e79778d3c554afa5b1586bceafdc2371a43f0d2","target":{"function":"onCreate","file":"src/com/android/settings/datausage/DataUsageList.java"},"deprecated":false,"digest":{"function_hash":"34249184479794743587955506957943658487","length":547},"id":"PUB-A-262741858-ed0fba42","match_only_versions":["13"],"signature_type":"Function"}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/6e79778d3c554afa5b1586bceafdc2371a43f0d2"],"severity":"Moderate","spl":"2023-06-01","types":["ID"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-262741858.json"}}],"schema_version":"1.9.0"}