{"id":"PUB-A-266700762","details":"In multiple functions of WifiNetworkFactory.java, there is a missing permission check. This could lead to local escalation of privilege from the guest user with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-266700762","CVE-2023-21185"],"modified":"2026-05-29T15:55:33.750044621Z","published":"2023-06-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2023-06-01"}],"affected":[{"package":{"name":"platform/packages/modules/Wifi","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13-next:0"},{"fixed":"13-next:2023-06-01"}]}],"versions":["13-next"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/modules/Wifi/+/61aed07783d93b2a3cbeb2a1a0f40c560bd14b2b"],"severity":"Moderate","spl":"2023-06-01","vanir_signatures":[{"target":{"function":"needNetworkFor","file":"service/java/com/android/server/wifi/WifiNetworkFactory.java"},"signature_version":"v1","id":"PUB-A-266700762-7103ca74","signature_type":"Function","digest":{"length":2207,"function_hash":"239135965997494739458696623849500405979"},"source":"https://android.googlesource.com/platform/packages/modules/Wifi/+/61aed07783d93b2a3cbeb2a1a0f40c560bd14b2b","deprecated":false},{"target":{"function":"acceptRequest","file":"service/java/com/android/server/wifi/WifiNetworkFactory.java"},"signature_version":"v1","id":"PUB-A-266700762-f2bf2ae0","signature_type":"Function","digest":{"length":1860,"function_hash":"311661579839707545632783702909289347180"},"source":"https://android.googlesource.com/platform/packages/modules/Wifi/+/61aed07783d93b2a3cbeb2a1a0f40c560bd14b2b","deprecated":false}],"types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-266700762.json"}},{"package":{"name":"platform/packages/modules/Wifi","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2023-06-01"}]}],"versions":["13"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/modules/Wifi/+/be4e652bf598831d2d8576bc601ca7dd4286ca36"],"severity":"Moderate","spl":"2023-06-01","vanir_signatures":[{"target":{"function":"acceptRequest","file":"service/java/com/android/server/wifi/WifiNetworkFactory.java"},"signature_version":"v1","id":"PUB-A-266700762-422fd868","source":"https://android.googlesource.com/platform/packages/modules/Wifi/+/be4e652bf598831d2d8576bc601ca7dd4286ca36","digest":{"length":1783,"function_hash":"312101056247928488820036140934587144301"},"signature_type":"Function","deprecated":false},{"target":{"function":"needNetworkFor","file":"service/java/com/android/server/wifi/WifiNetworkFactory.java"},"signature_version":"v1","id":"PUB-A-266700762-b49313ba","signature_type":"Function","digest":{"length":2109,"function_hash":"298646921894877777740840376430943233976"},"source":"https://android.googlesource.com/platform/packages/modules/Wifi/+/be4e652bf598831d2d8576bc601ca7dd4286ca36","deprecated":false}],"types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-266700762.json"}}],"schema_version":"1.7.5"}