CVE-2023-21179: Undefined Security Weakness

In parseSecurityParamsFromXml of XmlUtil.java, there is a possible bypass of user specified wifi encryption protocol due to improperly used crypto. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

PT-2023-17967 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a possible bypass of user-specified wifi encryption protocol due to improperly used crypto in the parseSecurityParamsFromXml function of XmlUtil.java. This could lead to local...