In parseInputs of ShimPreparedModel.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"vanir_signatures": [
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"133517263624627152021180462775993243955",
"120118863474742087825896320033900196726",
"313789544138700295684605181280235562304",
"30262238391531682495442564558807011361",
"284844929156171403640195441884753635955",
"192812171998338839540696107886823633161",
"216976616578596516229817424449038290274"
]
},
"id": "ASB-A-269455813-4684bbfc",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/packages/modules/NeuralNetworks/+/79024562d2cce3f2dc6a3340301d65251497dd83",
"target": {
"file": "shim_and_sl/ShimPreparedModel.cpp"
}
}
],
"fixes": [
"https://android.googlesource.com/platform/packages/modules/NeuralNetworks/+/79024562d2cce3f2dc6a3340301d65251497dd83"
],
"types": [
"ID"
],
"spl": "2023-08-01",
"severity": "High"
}{
"vanir_signatures": [
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"286461733144079132600206748818376505910",
"338048205177064937780261167548284088023",
"313789544138700295684605181280235562304",
"30262238391531682495442564558807011361",
"284844929156171403640195441884753635955",
"192812171998338839540696107886823633161",
"216976616578596516229817424449038290274"
]
},
"id": "ASB-A-269455813-bc85ca3e",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/packages/modules/NeuralNetworks/+/e7ce2bdba52a516aa41276f94447729d6412e082",
"target": {
"file": "shim_and_sl/ShimPreparedModel.cpp"
}
}
],
"fixes": [
"https://android.googlesource.com/platform/packages/modules/NeuralNetworks/+/e7ce2bdba52a516aa41276f94447729d6412e082"
],
"types": [
"ID"
],
"spl": "2023-08-01",
"severity": "High"
}{
"vanir_signatures": [
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"286461733144079132600206748818376505910",
"338048205177064937780261167548284088023",
"313789544138700295684605181280235562304",
"30262238391531682495442564558807011361",
"284844929156171403640195441884753635955",
"192812171998338839540696107886823633161",
"216976616578596516229817424449038290274"
]
},
"id": "ASB-A-269455813-6220c8ac",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/packages/modules/NeuralNetworks/+/3147c3ef6bcb6ee0fa8959726cb593e5d6ab17b8",
"target": {
"file": "shim_and_sl/ShimPreparedModel.cpp"
}
}
],
"fixes": [
"https://android.googlesource.com/platform/packages/modules/NeuralNetworks/+/3147c3ef6bcb6ee0fa8959726cb593e5d6ab17b8"
],
"types": [
"ID"
],
"spl": "2023-08-01",
"severity": "High"
}{
"vanir_signatures": [
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"133517263624627152021180462775993243955",
"120118863474742087825896320033900196726",
"313789544138700295684605181280235562304",
"30262238391531682495442564558807011361",
"284844929156171403640195441884753635955",
"192812171998338839540696107886823633161",
"216976616578596516229817424449038290274"
]
},
"id": "ASB-A-269455813-f16f9d4b",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/packages/modules/NeuralNetworks/+/553bc285b36b6312b24087bd085f12620028fac8",
"target": {
"file": "shim_and_sl/ShimPreparedModel.cpp"
}
}
],
"fixes": [
"https://android.googlesource.com/platform/packages/modules/NeuralNetworks/+/553bc285b36b6312b24087bd085f12620028fac8"
],
"types": [
"ID"
],
"spl": "2023-08-01",
"severity": "High"
}