In avrcparsbrowsersp of avrcpars_ct.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"vanir_signatures": [
{
"digest": {
"length": 8170.0,
"function_hash": "247765451417105509971984372813550218427"
},
"id": "ASB-A-179162665-0ea80331",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/system/bt/+/6e3c984806aa0ba9e8a836ef9fed12c1207a161e",
"target": {
"function": "avrc_pars_browse_rsp",
"file": "stack/avrc/avrc_pars_ct.cc"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"92637155743945259532362473297144745283",
"274900203395193526257773185250913046952",
"31900640143958934476839443973829257205",
"220015923380323806212744083220949843337",
"68132529070989801875441727549896483288",
"189831954230377371847567509080754373459",
"323216392069820833784336958856023997159",
"108899638876744916136458672721934488903",
"184476722414723359485571345897368083751",
"98826651103881505017688175113463020413"
]
},
"id": "ASB-A-179162665-2a9a6500",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/system/bt/+/6e3c984806aa0ba9e8a836ef9fed12c1207a161e",
"target": {
"file": "stack/avrc/avrc_pars_ct.cc"
}
}
],
"fixes": [
"https://android.googlesource.com/platform/system/bt/+/6e3c984806aa0ba9e8a836ef9fed12c1207a161e"
],
"types": [
"ID"
],
"spl": "2021-06-01",
"severity": "High"
}