In multiple functions of WifiNetworkFactory.java, there is a missing permission check. This could lead to local escalation of privilege from the guest user with no additional execution privileges needed. User interaction is not needed for exploitation.
{ "vanir_signatures": [ { "digest": { "length": 2207.0, "function_hash": "239135965997494739458696623849500405979" }, "id": "PUB-A-266700762-7103ca74", "source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/61aed07783d93b2a3cbeb2a1a0f40c560bd14b2b", "deprecated": false, "signature_version": "v1", "target": { "file": "service/java/com/android/server/wifi/WifiNetworkFactory.java", "function": "needNetworkFor" }, "signature_type": "Function" }, { "digest": { "length": 1860.0, "function_hash": "311661579839707545632783702909289347180" }, "id": "PUB-A-266700762-f2bf2ae0", "source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/61aed07783d93b2a3cbeb2a1a0f40c560bd14b2b", "deprecated": false, "signature_version": "v1", "target": { "file": "service/java/com/android/server/wifi/WifiNetworkFactory.java", "function": "acceptRequest" }, "signature_type": "Function" } ], "fixes": [ "https://android.googlesource.com/platform/packages/modules/Wifi/+/61aed07783d93b2a3cbeb2a1a0f40c560bd14b2b" ], "spl": "2023-06-01", "severity": "Moderate", "types": [ "EoP" ] }