In onCreate of WifiDialogActivity.java, there is a missing permission check. This could lead to local escalation of privilege from a guest user with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"vanir_signatures": [
{
"digest": {
"length": 1070.0,
"function_hash": "22540778110885899099295149132315098659"
},
"id": "PUB-A-226133034-0974d2e1",
"deprecated": false,
"target": {
"function": "onCreate",
"file": "src/com/android/settings/wifi/WifiDialogActivity.java"
},
"signature_type": "Function",
"match_only_versions": [
"13"
],
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/a09c33f49c2d8025b475f31f97684b0919cd189a",
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"331680241548120640732637950813423618419",
"330625712644560439905665376406109280763",
"214416774826381198887431004990514828941",
"123464542501830518251302421673961665693",
"100383292714303344328591006572568725033",
"53914481670964070342629675062259607123",
"290489390437304356837269100143485880537",
"145218590775382854201468427449450430113",
"85670028455605829055933677344838523182",
"4793110726557626096114028258196273961",
"79339572396844216866429910254617453268",
"179679681544337826586295570893219464756",
"98804998587821721315467228299898039967"
]
},
"id": "PUB-A-226133034-2b72c495",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/packages/apps/Settings/+/a09c33f49c2d8025b475f31f97684b0919cd189a",
"target": {
"file": "src/com/android/settings/wifi/WifiDialogActivity.java"
}
}
],
"fixes": [
"https://android.googlesource.com/platform/packages/apps/Settings/+/a09c33f49c2d8025b475f31f97684b0919cd189a"
],
"types": [
"EoP"
],
"spl": "2022-12-01",
"severity": "Moderate"
}