GSD-2023-21230 — Vulnetix

GSD-2023-21230 PUBLISHED

In onAccessPointChanged of AccessPointPreference.java, there is a possible way for unprivileged apps to receive a broadcast about WiFi access point change and its BSSID or SSID due to a precondition check failure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Products

Vendor	Product	Versions
Google	Android	13, 11

Timeline

Aug 7, 2023 CVE Published

References

https://source.android.com/security/bulletin/wear/2023-08-01 url

Open in Interactive Console →