{"id":"PUB-A-274443441","details":"In inviteInternal of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-274443441","CVE-2023-21169"],"modified":"2026-05-28T15:16:54.500952700Z","published":"2023-06-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2023-06-01"}],"affected":[{"package":{"name":"platform/external/wpa_supplicant_8","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13-next:0"},{"fixed":"13-next:2023-06-01"}]}],"versions":["13-next"],"ecosystem_specific":{"spl":"2023-06-01","fixes":["https://android.googlesource.com/platform/external/wpa_supplicant_8/+/947b5e2ed339224aa5f3751ca3b22370face0967"],"types":["ID"],"severity":"Moderate","vanir_signatures":[{"signature_type":"Function","deprecated":false,"id":"PUB-A-274443441-0b08522b","digest":{"function_hash":"307407439151717660491673238205494075480","length":431},"source":"https://android.googlesource.com/platform/external/wpa_supplicant_8/+/947b5e2ed339224aa5f3751ca3b22370face0967","target":{"function":"P2pIface::inviteInternal","file":"wpa_supplicant/aidl/p2p_iface.cpp"},"signature_version":"v1"},{"target":{"file":"wpa_supplicant/aidl/p2p_iface.cpp"},"signature_type":"Line","id":"PUB-A-274443441-3b980bba","digest":{"line_hashes":["119907998813426363392880003995276583923","291835486538058060057093696263315940017","333153964283568074003214593009907549266","75358402464565700087142645533899060131"],"threshold":0.9},"source":"https://android.googlesource.com/platform/external/wpa_supplicant_8/+/947b5e2ed339224aa5f3751ca3b22370face0967","deprecated":false,"signature_version":"v1"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-274443441.json"}},{"package":{"name":"platform/external/wpa_supplicant_8","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2023-06-01"}]}],"versions":["13"],"ecosystem_specific":{"spl":"2023-06-01","fixes":["https://android.googlesource.com/platform/external/wpa_supplicant_8/+/1d9ae9a55470b894973457e3a4892a8820ca1bd7"],"types":["ID"],"severity":"Moderate","vanir_signatures":[{"deprecated":false,"target":{"file":"wpa_supplicant/aidl/p2p_iface.cpp"},"id":"PUB-A-274443441-3f43a3a1","digest":{"line_hashes":["119907998813426363392880003995276583923","291835486538058060057093696263315940017","333153964283568074003214593009907549266","75358402464565700087142645533899060131"],"threshold":0.9},"source":"https://android.googlesource.com/platform/external/wpa_supplicant_8/+/1d9ae9a55470b894973457e3a4892a8820ca1bd7","signature_type":"Line","signature_version":"v1"},{"target":{"function":"P2pIface::inviteInternal","file":"wpa_supplicant/aidl/p2p_iface.cpp"},"signature_type":"Function","id":"PUB-A-274443441-9ec445a0","digest":{"function_hash":"307407439151717660491673238205494075480","length":431},"source":"https://android.googlesource.com/platform/external/wpa_supplicant_8/+/1d9ae9a55470b894973457e3a4892a8820ca1bd7","deprecated":false,"signature_version":"v1"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-274443441.json"}}],"schema_version":"1.7.5"}