In the Bluetooth service, there is a possible spoofing attack due to a logic error. This could lead to remote information disclosure of sensitive information with no additional execution privileges needed. User interaction is needed for exploitation.
{
"fixes": [
"https://android.googlesource.com/platform/system/bt/+/85b5df1d0dcc782ed5afc1dcf9247880416d5fbd"
],
"spl": "2020-09-01",
"severity": "High",
"types": [
"ID"
],
"vanir_signatures": [
{
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "144631527352708785669605938533289903268",
"length": 4072.0
},
"source": "https://android.googlesource.com/platform/system/bt/+/85b5df1d0dcc782ed5afc1dcf9247880416d5fbd",
"id": "ASB-A-150156492-4e443e5b",
"target": {
"file": "stack/btm/btm_sec.cc",
"function": "btm_io_capabilities_req"
}
},
{
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"line_hashes": [
"170403460339393663498797094155322075723",
"194759784187504724530703011411003004957",
"258290883064267929184184251572495109104",
"63729842577290671678589660683592540801",
"197099341038339303623913830382604877363",
"1818040819886790657837025921044714679"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/system/bt/+/85b5df1d0dcc782ed5afc1dcf9247880416d5fbd",
"id": "ASB-A-150156492-cffe960e",
"target": {
"file": "stack/btm/btm_sec.cc"
}
}
]
}
{
"fixes": [
"https://android.googlesource.com/platform/system/bt/+/85b5df1d0dcc782ed5afc1dcf9247880416d5fbd"
],
"spl": "2020-09-01",
"severity": "High",
"types": [
"ID"
],
"vanir_signatures": [
{
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"line_hashes": [
"170403460339393663498797094155322075723",
"194759784187504724530703011411003004957",
"258290883064267929184184251572495109104",
"63729842577290671678589660683592540801",
"197099341038339303623913830382604877363",
"1818040819886790657837025921044714679"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/system/bt/+/85b5df1d0dcc782ed5afc1dcf9247880416d5fbd",
"id": "ASB-A-150156492-0747bc7e",
"target": {
"file": "stack/btm/btm_sec.cc"
}
},
{
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "144631527352708785669605938533289903268",
"length": 4072.0
},
"source": "https://android.googlesource.com/platform/system/bt/+/85b5df1d0dcc782ed5afc1dcf9247880416d5fbd",
"id": "ASB-A-150156492-e6b4cfec",
"target": {
"file": "stack/btm/btm_sec.cc",
"function": "btm_io_capabilities_req"
}
}
]
}
{
"fixes": [
"https://android.googlesource.com/platform/system/bt/+/85b5df1d0dcc782ed5afc1dcf9247880416d5fbd"
],
"spl": "2020-09-01",
"severity": "High",
"types": [
"ID"
],
"vanir_signatures": [
{
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "144631527352708785669605938533289903268",
"length": 4072.0
},
"source": "https://android.googlesource.com/platform/system/bt/+/85b5df1d0dcc782ed5afc1dcf9247880416d5fbd",
"id": "ASB-A-150156492-06f7d02c",
"target": {
"file": "stack/btm/btm_sec.cc",
"function": "btm_io_capabilities_req"
}
},
{
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"line_hashes": [
"170403460339393663498797094155322075723",
"194759784187504724530703011411003004957",
"258290883064267929184184251572495109104",
"63729842577290671678589660683592540801",
"197099341038339303623913830382604877363",
"1818040819886790657837025921044714679"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/system/bt/+/85b5df1d0dcc782ed5afc1dcf9247880416d5fbd",
"id": "ASB-A-150156492-c99b1149",
"target": {
"file": "stack/btm/btm_sec.cc"
}
}
]
}
{
"fixes": [
"https://android.googlesource.com/platform/system/bt/+/85b5df1d0dcc782ed5afc1dcf9247880416d5fbd"
],
"spl": "2020-09-01",
"severity": "High",
"types": [
"ID"
],
"vanir_signatures": [
{
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"line_hashes": [
"170403460339393663498797094155322075723",
"194759784187504724530703011411003004957",
"258290883064267929184184251572495109104",
"63729842577290671678589660683592540801",
"197099341038339303623913830382604877363",
"1818040819886790657837025921044714679"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/system/bt/+/85b5df1d0dcc782ed5afc1dcf9247880416d5fbd",
"id": "ASB-A-150156492-1e960d8b",
"target": {
"file": "stack/btm/btm_sec.cc"
}
},
{
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "144631527352708785669605938533289903268",
"length": 4072.0
},
"source": "https://android.googlesource.com/platform/system/bt/+/85b5df1d0dcc782ed5afc1dcf9247880416d5fbd",
"id": "ASB-A-150156492-cd9efa39",
"target": {
"file": "stack/btm/btm_sec.cc",
"function": "btm_io_capabilities_req"
}
}
]
}