In parse_printerAttributes of ipphelper.c, there is a possible out of bounds read due to a string without a null-terminator. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
{ "vanir_signatures": [ { "match_only_versions": [ "13" ], "digest": { "threshold": 0.9, "line_hashes": [ "281223546792539980444731323099729321152", "78878380113107437371068183287377068563", "286561206235217815536073957459422065158", "128056646733819622622161605146323032590", "127509922738230290033377711204710355522", "147543916602383259889903101485418965264", "289348270378625126302735595659803179825" ] }, "id": "PUB-A-180680572-5cdd3be9", "source": "https://android.googlesource.com/platform/packages/services/BuiltInPrintService/+/4474ae3ffa04854c4f60b17dd183b3baf5fdd831", "deprecated": false, "signature_version": "v1", "target": { "file": "jni/ipphelper/ipphelper.c" }, "signature_type": "Line" }, { "digest": { "length": 11728.0, "function_hash": "323140352685166146607609617339477999096" }, "id": "PUB-A-180680572-729e5147", "source": "https://android.googlesource.com/platform/packages/services/BuiltInPrintService/+/4474ae3ffa04854c4f60b17dd183b3baf5fdd831", "deprecated": false, "signature_version": "v1", "target": { "file": "jni/ipphelper/ipphelper.c", "function": "parse_printerAttributes" }, "signature_type": "Function" } ], "fixes": [ "https://android.googlesource.com/platform/packages/services/BuiltInPrintService/+/4474ae3ffa04854c4f60b17dd183b3baf5fdd831" ], "spl": "2023-03-01", "severity": "Moderate", "types": [ "ID" ] }