Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2023-21252: Android: Improper Input Validation in Wifi Configuration

CVE-2023-21252 · published 3 years ago

Summary

A bug in Android's wifi configuration can cause a device to get stuck in a boot loop if it receives bad input. This means the device will keep restarting and won't function properly. To avoid this, ensure you're using the latest version of Android and follow proper input validation when working with wifi configurations.

What to do

Update google platform/packages/modules/wifi to version 14-next:2023-10-01.
Update google platform/frameworks/opt/net/wifi to version 11:2023-10-01.
Update google platform/packages/modules/wifi to version 12:2023-10-01.
Update google platform/packages/modules/wifi to version 12L:2023-10-01.
Update google platform/packages/modules/wifi to version 13:2023-10-01.

Affected software

Ecosystem	Vendor	Product	Affected versions
Android	google	platform/packages/modules/wifi	>= 14-next:0, < 14-next:2023-10-01 >= 12:0, < 12:2023-10-01 >= 12L:0, < 12L:2023-10-01 >= 13:0, < 13:2023-10-01 Fix: upgrade to 14-next:2023-10-01
Android	google	platform/frameworks/opt/net/wifi	>= 11:0, < 11:2023-10-01 Fix: upgrade to 11:2023-10-01
–	google	android	11.0 12.0 12.1 13.0 `cpe:2.3:o:google:android:11.0:::::::*`

Original advisory text

In validatePassword of WifiConfigurationUtil.java, there is a possible way to get the device into a boot loop due to improper input validation. This could lead to local denial of service with no ad...

References

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker partial control

Severity

5.5 Medium

Exploitation

<1% chance of attack within 30 days

Timeline

Published1 Oct 2023

Updated4 Nov 2026

First seen17 Aug 2026

Sources

ASB-A-275339978 · OSV

CVE-2023-21252 · NVD

Track software like this

Free during beta