ASB-A-276898739

See a problem?

Import Source

https://storage.googleapis.com/android-osv/ASB-A-276898739.json

JSON Data

https://api.osv.dev/v1/vulns/ASB-A-276898739

Aliases

CVE-2024-0030

Published

2024-02-01T00:00:00Z

Modified

2024-07-26T15:04:04Z

Summary

Potential OOB Read in attp_build_value_cmd() of att_protocol.cc

Details

In btiftobtaresponse of btifgatt_util.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / platform/packages/modules/Bluetooth

Package

Name: platform/packages/modules/Bluetooth

Affected ranges

Type: ECOSYSTEM
Events: Introduced

14-next:0

Fixed

14-next:2024-02-01

Affected versions

Other

14-next

Ecosystem specific

{
    "fixes": [
        "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/0dbf1a6ed704dedc92e1ea1196dd6428b4d50240"
    ],
    "spl": "2024-02-01",
    "types": [
        "ID"
    ],
    "severity": "High"
}

Android / platform/packages/modules/Bluetooth

Package

Name: platform/packages/modules/Bluetooth

Affected ranges

Type: ECOSYSTEM
Events: Introduced

13:0

Fixed

13:2024-02-01

Affected versions

Other

Ecosystem specific

{
    "fixes": [
        "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/59c9e84bd31d4935a875d588bf4d2cc5bfb07d59"
    ],
    "spl": "2024-02-01",
    "types": [
        "ID"
    ],
    "severity": "High"
}

Android / platform/packages/modules/Bluetooth

Package

Name: platform/packages/modules/Bluetooth

Affected ranges

Type: ECOSYSTEM
Events: Introduced

14:0

Fixed

14:2024-02-01

Affected versions

Other

Ecosystem specific

{
    "fixes": [
        "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/59c9e84bd31d4935a875d588bf4d2cc5bfb07d59"
    ],
    "spl": "2024-02-01",
    "types": [
        "ID"
    ],
    "severity": "High"
}