PUB-A-237672190

See a problem?
Import Source
https://storage.googleapis.com/android-osv/PUB-A-237672190.json
JSON Data
https://api.osv.dev/v1/vulns/PUB-A-237672190
Aliases
  • A-237672190
  • CVE-2023-21001
Published
2023-03-01T00:00:00Z
Modified
2026-09-28T15:29:43Z
Summary
[none]
Details

In onContextItemSelected of NetworkProviderSettings.java, there is a possible way for users to change the Wi-Fi settings of other users due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / platform/packages/apps/Settings

Package

Name
platform/packages/apps/Settings

Affected ranges

Type
ECOSYSTEM
Events
Introduced
13:0
Fixed
13:2023-03-01

Affected versions

Other
13

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/packages/apps/Settings/+/dcfbccbfbc14df312f7fd60e33e50626112a80e3"
    ],
    "severity":  "Moderate",
    "spl":  "2023-03-01",
    "types":  [
        "EoP"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "85931917528647656650393916058361756571",
                "length":  576
            },
            "id":  "PUB-A-237672190-0117d4ff",
            "match_only_versions":  [
                "13"
            ],
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/apps/Settings/+/dcfbccbfbc14df312f7fd60e33e50626112a80e3",
            "target":  {
                "file":  "src/com/android/settings/network/NetworkProviderSettings.java",
                "function":  "onContextItemSelected"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "18085920037116847978295049589634668536",
                "length":  974
            },
            "id":  "PUB-A-237672190-42ef2862",
            "match_only_versions":  [
                "13"
            ],
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/apps/Settings/+/dcfbccbfbc14df312f7fd60e33e50626112a80e3",
            "target":  {
                "file":  "src/com/android/settings/network/NetworkProviderSettings.java",
                "function":  "onCreateContextMenu"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "72759330091169440706046299701103761556",
                    "251969557952653459090559889600811404176",
                    "320646116583179365368294083563730213317",
                    "101929945630366683448370742427132922943",
                    "148464962656289052051106198863838348353",
                    "77905500661677139232236866300303702674",
                    "71703739065708909952415041836772721085",
                    "209282554524430241113028537215243358836",
                    "236312533297466339603767855946449744476",
                    "301454096643885133867361433275108265674",
                    "81204061339564732056355095932318258971",
                    "86006563549833263809889335741260054671",
                    "92173793544998893813557468613625537171",
                    "314326959141032461913909579284862231984",
                    "139903985332960735288290740659866315909",
                    "109322724378208407728212352092235957599",
                    "89754640269905572923715566238785842771",
                    "329913307834130087282650055430470414456"
                ],
                "threshold":  0.9
            },
            "id":  "PUB-A-237672190-954592b7",
            "match_only_versions":  [
                "13"
            ],
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/packages/apps/Settings/+/dcfbccbfbc14df312f7fd60e33e50626112a80e3",
            "target":  {
                "file":  "src/com/android/settings/network/NetworkProviderSettings.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/PUB-A-237672190.json"