ASB-A-181660448

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-181660448.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-181660448
Aliases
Published
2021-06-01T00:00:00Z
Modified
2026-04-29T15:10:00.007170Z
Summary
[none]
Details

In p2pprocessprovdiscreq of p2p_pd.c, there is a possible out of bounds read and write due to a use after free. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android
platform/external/wpa_supplicant_8

Package

Name
platform/external/wpa_supplicant_8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
8.1:0
Fixed
8.1:2021-06-01

Affected versions

8.*
8.1

Ecosystem specific 

{
    "spl": "2021-06-01",
    "fixes": [
        "https://android.googlesource.com/platform/external/wpa_supplicant_8/+/61dece6d28bd084f0f1987cdbfff735901ecb11c"
    ],
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "signature_type": "Line",
            "signature_version": "v1",
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "271018181069020268075351506102187983107",
                    "268700010634199033158328312405380838829",
                    "329970341488664131972201553473184135355",
                    "190733282669035384697854612416322817722",
                    "128312418882450711487850140666863854913",
                    "2917010316292243618786757244431791290",
                    "41800503454006324207678608315450033307",
                    "22938884100498773189593958736268896412",
                    "184332446520627855974836001186859673773",
                    "41382533008751572981989992649789272845",
                    "330425334554713280711169901383246438630"
                ],
                "threshold": 0.9
            },
            "source": "https://android.googlesource.com/platform/external/wpa_supplicant_8/+/61dece6d28bd084f0f1987cdbfff735901ecb11c",
            "target": {
                "file": "src/p2p/p2p_pd.c"
            },
            "id": "ASB-A-181660448-2883d2df"
        },
        {
            "signature_type": "Function",
            "signature_version": "v1",
            "deprecated": false,
            "digest": {
                "length": 15065.0,
                "function_hash": "296722937661991391403820521325526362841"
            },
            "source": "https://android.googlesource.com/platform/external/wpa_supplicant_8/+/61dece6d28bd084f0f1987cdbfff735901ecb11c",
            "target": {
                "function": "p2p_process_prov_disc_req",
                "file": "src/p2p/p2p_pd.c"
            },
            "id": "ASB-A-181660448-4e054bbc"
        }
    ],
    "severity": "Critical"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-181660448.json"
platform/external/wpa_supplicant_8

Package

Name
platform/external/wpa_supplicant_8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
9:0
Fixed
9:2021-06-01

Affected versions

Other
9

Ecosystem specific 

{
    "spl": "2021-06-01",
    "fixes": [
        "https://android.googlesource.com/platform/external/wpa_supplicant_8/+/b8acd2a860f5a82a501be188a6f86f985cde74c4"
    ],
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "signature_type": "Function",
            "signature_version": "v1",
            "deprecated": false,
            "digest": {
                "length": 15065.0,
                "function_hash": "296722937661991391403820521325526362841"
            },
            "source": "https://android.googlesource.com/platform/external/wpa_supplicant_8/+/b8acd2a860f5a82a501be188a6f86f985cde74c4",
            "target": {
                "function": "p2p_process_prov_disc_req",
                "file": "src/p2p/p2p_pd.c"
            },
            "id": "ASB-A-181660448-32cdd266"
        },
        {
            "signature_type": "Line",
            "signature_version": "v1",
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "271018181069020268075351506102187983107",
                    "268700010634199033158328312405380838829",
                    "329970341488664131972201553473184135355",
                    "190733282669035384697854612416322817722",
                    "128312418882450711487850140666863854913",
                    "2917010316292243618786757244431791290",
                    "41800503454006324207678608315450033307",
                    "22938884100498773189593958736268896412",
                    "184332446520627855974836001186859673773",
                    "41382533008751572981989992649789272845",
                    "330425334554713280711169901383246438630"
                ],
                "threshold": 0.9
            },
            "source": "https://android.googlesource.com/platform/external/wpa_supplicant_8/+/b8acd2a860f5a82a501be188a6f86f985cde74c4",
            "target": {
                "file": "src/p2p/p2p_pd.c"
            },
            "id": "ASB-A-181660448-7c4c64ab"
        }
    ],
    "severity": "Critical"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-181660448.json"
platform/external/wpa_supplicant_8

Package

Name
platform/external/wpa_supplicant_8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
10:0
Fixed
10:2021-06-01

Affected versions

Other
10

Ecosystem specific 

{
    "spl": "2021-06-01",
    "fixes": [
        "https://android.googlesource.com/platform/external/wpa_supplicant_8/+/8b68d7983c6139cdc4f65ba14b4af5ef9e5c66b7"
    ],
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "signature_type": "Function",
            "signature_version": "v1",
            "deprecated": false,
            "digest": {
                "length": 15065.0,
                "function_hash": "296722937661991391403820521325526362841"
            },
            "source": "https://android.googlesource.com/platform/external/wpa_supplicant_8/+/8b68d7983c6139cdc4f65ba14b4af5ef9e5c66b7",
            "target": {
                "function": "p2p_process_prov_disc_req",
                "file": "src/p2p/p2p_pd.c"
            },
            "id": "ASB-A-181660448-524f82b1"
        },
        {
            "signature_type": "Line",
            "signature_version": "v1",
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "271018181069020268075351506102187983107",
                    "268700010634199033158328312405380838829",
                    "329970341488664131972201553473184135355",
                    "190733282669035384697854612416322817722",
                    "128312418882450711487850140666863854913",
                    "2917010316292243618786757244431791290",
                    "41800503454006324207678608315450033307",
                    "22938884100498773189593958736268896412",
                    "184332446520627855974836001186859673773",
                    "41382533008751572981989992649789272845",
                    "330425334554713280711169901383246438630"
                ],
                "threshold": 0.9
            },
            "source": "https://android.googlesource.com/platform/external/wpa_supplicant_8/+/8b68d7983c6139cdc4f65ba14b4af5ef9e5c66b7",
            "target": {
                "file": "src/p2p/p2p_pd.c"
            },
            "id": "ASB-A-181660448-d1d4e4e0"
        }
    ],
    "severity": "Critical"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-181660448.json"
platform/external/wpa_supplicant_8

Package

Name
platform/external/wpa_supplicant_8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
11:0
Fixed
11:2021-06-01

Affected versions

Other
11

Ecosystem specific 

{
    "spl": "2021-06-01",
    "fixes": [
        "https://android.googlesource.com/platform/external/wpa_supplicant_8/+/838e6fd132c114d964eb8b589166a1defe8e6729"
    ],
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "signature_type": "Function",
            "signature_version": "v1",
            "deprecated": false,
            "digest": {
                "length": 15065.0,
                "function_hash": "296722937661991391403820521325526362841"
            },
            "source": "https://android.googlesource.com/platform/external/wpa_supplicant_8/+/838e6fd132c114d964eb8b589166a1defe8e6729",
            "target": {
                "function": "p2p_process_prov_disc_req",
                "file": "src/p2p/p2p_pd.c"
            },
            "id": "ASB-A-181660448-5234699a"
        },
        {
            "signature_type": "Line",
            "signature_version": "v1",
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "271018181069020268075351506102187983107",
                    "268700010634199033158328312405380838829",
                    "329970341488664131972201553473184135355",
                    "190733282669035384697854612416322817722",
                    "128312418882450711487850140666863854913",
                    "2917010316292243618786757244431791290",
                    "41800503454006324207678608315450033307",
                    "22938884100498773189593958736268896412",
                    "184332446520627855974836001186859673773",
                    "41382533008751572981989992649789272845",
                    "330425334554713280711169901383246438630"
                ],
                "threshold": 0.9
            },
            "source": "https://android.googlesource.com/platform/external/wpa_supplicant_8/+/838e6fd132c114d964eb8b589166a1defe8e6729",
            "target": {
                "file": "src/p2p/p2p_pd.c"
            },
            "id": "ASB-A-181660448-58cb4c14"
        }
    ],
    "severity": "Critical"
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-181660448.json"