In p2p_copy_client_info of p2p.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution if the target device is performing a Wi-Fi Direct search, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-172937525
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-wpa_supplicant | May 4, 2022 | Feb 10, 2021 | |
| Alpine Linux | alpine-linux-upgrade-wpa_supplicant | Aug 22, 2024 | Feb 10, 2021 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-wpa_supplicantamazon-linux-ami-2-upgrade-wpa_supplicant-debuginfo | Jun 24, 2021 | Feb 10, 2021 | |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Feb 10, 2021 | |
| Centos_linux | — | centos-upgrade-wpa_supplicantcentos-upgrade-wpa_supplicant-debuginfocentos-upgrade-wpa_supplicant-debugsource | Jun 1, 2021 | Feb 10, 2021 |
| Debian | debian-upgrade-wpa | Feb 22, 2021 | Feb 10, 2021 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-wpa_supplicant | May 18, 2021 | Feb 10, 2021 | |
| Oracle_linux | — | oracle-linux-upgrade-wpa-supplicant | May 26, 2021 | Feb 4, 2021 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-wpa_supplicantredhat-upgrade-wpa_supplicant-debuginforedhat-upgrade-wpa_supplicant-debugsource | May 21, 2021 | Feb 10, 2021 | |
| Rocky_linux | rocky-upgrade-wpa_supplicantrocky-upgrade-wpa_supplicant-debuginforocky-upgrade-wpa_supplicant-debugsource | Mar 12, 2024 | Feb 10, 2021 | |
| Suse | — | suse-upgrade-wpa_supplicantsuse-upgrade-wpa_supplicant-gui | Feb 12, 2021 | Feb 10, 2021 |
| Ubuntu | ubuntu-pro-upgrade-hostapdubuntu-pro-upgrade-wpasupplicantubuntu-upgrade-hostapdubuntu-upgrade-wpasupplicant | Feb 12, 2021 | Feb 10, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub