In parse_printerAttributes of ipphelper.c, there is a possible out of bounds read due to a string without a null-terminator. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"vanir_signatures": [
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"281223546792539980444731323099729321152",
"78878380113107437371068183287377068563",
"286561206235217815536073957459422065158",
"128056646733819622622161605146323032590",
"127509922738230290033377711204710355522",
"147543916602383259889903101485418965264",
"289348270378625126302735595659803179825"
]
},
"id": "PUB-A-180680572-5cdd3be9",
"deprecated": false,
"target": {
"file": "jni/ipphelper/ipphelper.c"
},
"signature_type": "Line",
"match_only_versions": [
"13"
],
"source": "https://android.googlesource.com/platform/packages/services/BuiltInPrintService/+/4474ae3ffa04854c4f60b17dd183b3baf5fdd831",
"signature_version": "v1"
},
{
"digest": {
"length": 11728.0,
"function_hash": "323140352685166146607609617339477999096"
},
"id": "PUB-A-180680572-729e5147",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/services/BuiltInPrintService/+/4474ae3ffa04854c4f60b17dd183b3baf5fdd831",
"target": {
"function": "parse_printerAttributes",
"file": "jni/ipphelper/ipphelper.c"
}
}
],
"fixes": [
"https://android.googlesource.com/platform/packages/services/BuiltInPrintService/+/4474ae3ffa04854c4f60b17dd183b3baf5fdd831"
],
"types": [
"ID"
],
"spl": "2023-03-01",
"severity": "Moderate"
}