In inviteInternal of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
{
"spl": "2023-06-01",
"fixes": [
"https://android.googlesource.com/platform/external/wpa_supplicant_8/+/947b5e2ed339224aa5f3751ca3b22370face0967"
],
"types": [
"ID"
],
"vanir_signatures": [
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 431.0,
"function_hash": "307407439151717660491673238205494075480"
},
"source": "https://android.googlesource.com/platform/external/wpa_supplicant_8/+/947b5e2ed339224aa5f3751ca3b22370face0967",
"target": {
"function": "P2pIface::inviteInternal",
"file": "wpa_supplicant/aidl/p2p_iface.cpp"
},
"id": "PUB-A-274443441-0b08522b"
},
{
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"119907998813426363392880003995276583923",
"291835486538058060057093696263315940017",
"333153964283568074003214593009907549266",
"75358402464565700087142645533899060131"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/external/wpa_supplicant_8/+/947b5e2ed339224aa5f3751ca3b22370face0967",
"target": {
"file": "wpa_supplicant/aidl/p2p_iface.cpp"
},
"id": "PUB-A-274443441-3b980bba"
}
],
"severity": "Moderate"
}
{
"spl": "2023-06-01",
"fixes": [
"https://android.googlesource.com/platform/external/wpa_supplicant_8/+/1d9ae9a55470b894973457e3a4892a8820ca1bd7"
],
"types": [
"ID"
],
"vanir_signatures": [
{
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"119907998813426363392880003995276583923",
"291835486538058060057093696263315940017",
"333153964283568074003214593009907549266",
"75358402464565700087142645533899060131"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/external/wpa_supplicant_8/+/1d9ae9a55470b894973457e3a4892a8820ca1bd7",
"target": {
"file": "wpa_supplicant/aidl/p2p_iface.cpp"
},
"id": "PUB-A-274443441-3f43a3a1"
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 431.0,
"function_hash": "307407439151717660491673238205494075480"
},
"source": "https://android.googlesource.com/platform/external/wpa_supplicant_8/+/1d9ae9a55470b894973457e3a4892a8820ca1bd7",
"target": {
"function": "P2pIface::inviteInternal",
"file": "wpa_supplicant/aidl/p2p_iface.cpp"
},
"id": "PUB-A-274443441-9ec445a0"
}
],
"severity": "Moderate"
}