{"schema_version":"1.9.0","id":"ASB-A-172937525","published":"2021-02-01T00:00:00Z","modified":"2026-09-10T15:43:18.983809180Z","aliases":["A-172937525","CVE-2021-0326"],"details":"In p2p_copy_client_info of p2p.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution if the target device is performing a Wi-Fi Direct search, with no additional execution privileges needed. User interaction is not needed for exploitation.","affected":[{"package":{"name":"platform/external/wpa_supplicant_8","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0:0"},{"fixed":"8.0:2021-02-01"}]}],"versions":["8.0"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/external/wpa_supplicant_8/+/0b60cb210510c68871c8d735285bc4915de3bd80"],"severity":"Critical","spl":"2021-02-01","types":["RCE"],"vanir_signatures":[{"deprecated":false,"digest":{"line_hashes":["27953088862501608363902232068580082871","239874137859324499201315692976508883353","133419836234293689097076431483329205039","91759737128570643652395725378764883923","41591529171382063936714124977847515994"],"threshold":0.9},"id":"ASB-A-172937525-679dcf59","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/external/wpa_supplicant_8/+/0b60cb210510c68871c8d735285bc4915de3bd80","target":{"file":"src/p2p/p2p.c"}},{"deprecated":false,"digest":{"function_hash":"100878999754899109193204500004704371025","length":566},"id":"ASB-A-172937525-c0500ad4","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/external/wpa_supplicant_8/+/0b60cb210510c68871c8d735285bc4915de3bd80","target":{"file":"src/p2p/p2p.c","function":"p2p_copy_client_info"}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-172937525.json"}},{"package":{"name":"platform/external/wpa_supplicant_8","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.1:0"},{"fixed":"8.1:2021-02-01"}]}],"versions":["8.1"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/external/wpa_supplicant_8/+/0b60cb210510c68871c8d735285bc4915de3bd80"],"severity":"Critical","spl":"2021-02-01","types":["RCE"],"vanir_signatures":[{"deprecated":false,"digest":{"line_hashes":["27953088862501608363902232068580082871","239874137859324499201315692976508883353","133419836234293689097076431483329205039","91759737128570643652395725378764883923","41591529171382063936714124977847515994"],"threshold":0.9},"id":"ASB-A-172937525-012af784","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/external/wpa_supplicant_8/+/0b60cb210510c68871c8d735285bc4915de3bd80","target":{"file":"src/p2p/p2p.c"}},{"deprecated":false,"digest":{"function_hash":"100878999754899109193204500004704371025","length":566},"id":"ASB-A-172937525-17f35892","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/external/wpa_supplicant_8/+/0b60cb210510c68871c8d735285bc4915de3bd80","target":{"file":"src/p2p/p2p.c","function":"p2p_copy_client_info"}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-172937525.json"}},{"package":{"name":"platform/external/wpa_supplicant_8","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9:0"},{"fixed":"9:2021-02-01"}]}],"versions":["9"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/external/wpa_supplicant_8/+/0b60cb210510c68871c8d735285bc4915de3bd80"],"severity":"Critical","spl":"2021-02-01","types":["RCE"],"vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"100878999754899109193204500004704371025","length":566},"id":"ASB-A-172937525-05ec0ea0","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/external/wpa_supplicant_8/+/0b60cb210510c68871c8d735285bc4915de3bd80","target":{"file":"src/p2p/p2p.c","function":"p2p_copy_client_info"}},{"deprecated":false,"digest":{"line_hashes":["27953088862501608363902232068580082871","239874137859324499201315692976508883353","133419836234293689097076431483329205039","91759737128570643652395725378764883923","41591529171382063936714124977847515994"],"threshold":0.9},"id":"ASB-A-172937525-7188901b","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/external/wpa_supplicant_8/+/0b60cb210510c68871c8d735285bc4915de3bd80","target":{"file":"src/p2p/p2p.c"}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-172937525.json"}},{"package":{"name":"platform/external/wpa_supplicant_8","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2021-02-01"}]}],"versions":["10"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/external/wpa_supplicant_8/+/0b60cb210510c68871c8d735285bc4915de3bd80"],"severity":"Critical","spl":"2021-02-01","types":["RCE"],"vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"100878999754899109193204500004704371025","length":566},"id":"ASB-A-172937525-276db8a2","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/external/wpa_supplicant_8/+/0b60cb210510c68871c8d735285bc4915de3bd80","target":{"file":"src/p2p/p2p.c","function":"p2p_copy_client_info"}},{"deprecated":false,"digest":{"line_hashes":["27953088862501608363902232068580082871","239874137859324499201315692976508883353","133419836234293689097076431483329205039","91759737128570643652395725378764883923","41591529171382063936714124977847515994"],"threshold":0.9},"id":"ASB-A-172937525-bcd20c16","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/external/wpa_supplicant_8/+/0b60cb210510c68871c8d735285bc4915de3bd80","target":{"file":"src/p2p/p2p.c"}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-172937525.json"}},{"package":{"name":"platform/external/wpa_supplicant_8","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2021-02-01"}]}],"versions":["11"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/external/wpa_supplicant_8/+/0b60cb210510c68871c8d735285bc4915de3bd80"],"severity":"Critical","spl":"2021-02-01","types":["RCE"],"vanir_signatures":[{"deprecated":false,"digest":{"line_hashes":["27953088862501608363902232068580082871","239874137859324499201315692976508883353","133419836234293689097076431483329205039","91759737128570643652395725378764883923","41591529171382063936714124977847515994"],"threshold":0.9},"id":"ASB-A-172937525-5eb6c528","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/external/wpa_supplicant_8/+/0b60cb210510c68871c8d735285bc4915de3bd80","target":{"file":"src/p2p/p2p.c"}},{"deprecated":false,"digest":{"function_hash":"100878999754899109193204500004704371025","length":566},"id":"ASB-A-172937525-ce15f42c","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/external/wpa_supplicant_8/+/0b60cb210510c68871c8d735285bc4915de3bd80","target":{"file":"src/p2p/p2p.c","function":"p2p_copy_client_info"}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-172937525.json"}}],"references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2021-02-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/external/wpa_supplicant_8/+/0b60cb210510c68871c8d735285bc4915de3bd80"}]}