In btm_ble_periodic_adv_sync_tx_rcvd of btm_ble_gap.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure over Bluetooth, if the firmware were compromised with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-233879420
References
| Link | Resource |
|---|---|
| https://source.android.com/security/bulletin/pixel/2023-06-01 | Vendor Advisory |
| https://source.android.com/security/bulletin/pixel/2023-06-01 | Vendor Advisory |
Configurations
History
21 Nov 2024, 07:42
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://source.android.com/security/bulletin/pixel/2023-06-01 - Vendor Advisory |
05 Jul 2023, 19:25
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.5 |
| CWE | CWE-125 | |
| First Time |
Google
Google android |
|
| References | (MISC) https://source.android.com/security/bulletin/pixel/2023-06-01 - Vendor Advisory | |
| CPE | cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:* |
28 Jun 2023, 19:27
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-06-28 18:15
Updated : 2024-11-21 07:42
NVD link : CVE-2023-21195
Mitre link : CVE-2023-21195
CVE.ORG link : CVE-2023-21195
JSON object : View
Products Affected
- android
CWE
CWE-125
Out-of-bounds Read