In p2p_copy_client_info of p2p.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution if the target device is performing a Wi-Fi Direct search, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-172937525
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade wpa_supplicant | May 4, 2022 | Feb 10, 2021 |
| Alpine Linux | — | Upgrade wpa_supplicant | Aug 22, 2024 | Feb 10, 2021 |
| Amazon Linux Ami 2 | — | Upgrade wpa_supplicantUpgrade wpa_supplicant-debuginfo | Jun 24, 2021 | Feb 10, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Feb 10, 2021 |
| Centos_linux | — | Upgrade wpa_supplicant-debuginfoUpgrade wpa_supplicantUpgrade wpa_supplicant-debugsource | Jun 1, 2021 | Feb 10, 2021 |
| Debian | — | Upgrade wpa | Feb 22, 2021 | Feb 10, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade wpa_supplicant | May 18, 2021 | Feb 10, 2021 |
| Oracle_linux | — | Upgrade wpa_supplicant | May 26, 2021 | Feb 4, 2021 |
| Redhat_linux | — | No solution existsUpgrade wpa_supplicant-debugsourceUpgrade wpa_supplicantUpgrade wpa_supplicant-debuginfo | May 21, 2021 | Feb 10, 2021 |
| Rocky_linux | — | Upgrade wpa_supplicant-debugsourceUpgrade wpa_supplicantUpgrade wpa_supplicant-debuginfo | Mar 12, 2024 | Feb 10, 2021 |
| Suse | — | Upgrade wpa_supplicant-guiUpgrade wpa_supplicant | Feb 12, 2021 | Feb 10, 2021 |
| Ubuntu | — | Upgrade hostapd (Ubuntu Pro)Upgrade wpasupplicantUpgrade wpasupplicant (Ubuntu Pro)Upgrade hostapd | Feb 12, 2021 | Feb 10, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub