In avdt_msg_asmbl of avdt_msg.cc, there is a possible out of bounds write due to an integer overflow. This could lead to paired device escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
References
| Link | Resource |
|---|---|
| https://android.googlesource.com/platform/packages/modules/Bluetooth/+/668bbca29797728004d88db4c9b69102f3939008 | Issue Tracking Patch |
| https://source.android.com/security/bulletin/2023-09-01 | Vendor Advisory |
| https://android.googlesource.com/platform/packages/modules/Bluetooth/+/668bbca29797728004d88db4c9b69102f3939008 | Issue Tracking Patch |
| https://source.android.com/security/bulletin/2023-09-01 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 08:08
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://android.googlesource.com/platform/packages/modules/Bluetooth/+/668bbca29797728004d88db4c9b69102f3939008 - Issue Tracking, Patch | |
| References | () https://source.android.com/security/bulletin/2023-09-01 - Vendor Advisory |
14 Sep 2023, 02:02
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
| CWE | CWE-787 | |
| References | (MISC) https://source.android.com/security/bulletin/2023-09-01 - Vendor Advisory | |
| References | (MISC) https://android.googlesource.com/platform/packages/modules/Bluetooth/+/668bbca29797728004d88db4c9b69102f3939008 - Issue Tracking, Patch | |
| CPE | cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:* cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:* cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:* cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:* |
|
| First Time |
Google android
|
11 Sep 2023, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-09-11 21:15
Updated : 2024-11-21 08:08
NVD link : CVE-2023-35684
Mitre link : CVE-2023-35684
CVE.ORG link : CVE-2023-35684
JSON object : View
Products Affected
- android
CWE
CWE-787
Out-of-bounds Write