In buildreadmultirsp of gattsr.cc, there is a possible denial of service due to a logic error in the code. This could lead to remote (proximal/adjacent) denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"vanir_signatures": [
{
"digest": {
"length": 2156.0,
"function_hash": "39974884357733382414201187773803691582"
},
"id": "ASB-A-356886209-9bfab64c",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/24508a81f05dc33e2abda46997445d84c4c76df5",
"target": {
"function": "build_read_multi_rsp",
"file": "system/stack/gatt/gatt_sr.cc"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"256103936039081068814854393900838184127",
"233910280098665537013382464207360200070",
"83699234729775685097611726235894016936",
"106566999101762116401845614754552683359"
]
},
"id": "ASB-A-356886209-c45409bc",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/24508a81f05dc33e2abda46997445d84c4c76df5",
"target": {
"file": "system/stack/gatt/gatt_sr.cc"
}
}
],
"fixes": [
"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/24508a81f05dc33e2abda46997445d84c4c76df5"
],
"types": [
"DoS"
],
"spl": "2025-01-01",
"severity": "High"
}{
"vanir_signatures": [
{
"digest": {
"length": 2156.0,
"function_hash": "39974884357733382414201187773803691582"
},
"id": "ASB-A-356886209-22f7266c",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/24508a81f05dc33e2abda46997445d84c4c76df5",
"target": {
"function": "build_read_multi_rsp",
"file": "system/stack/gatt/gatt_sr.cc"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"256103936039081068814854393900838184127",
"233910280098665537013382464207360200070",
"83699234729775685097611726235894016936",
"106566999101762116401845614754552683359"
]
},
"id": "ASB-A-356886209-34113492",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/24508a81f05dc33e2abda46997445d84c4c76df5",
"target": {
"file": "system/stack/gatt/gatt_sr.cc"
}
}
],
"fixes": [
"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/24508a81f05dc33e2abda46997445d84c4c76df5"
],
"types": [
"DoS"
],
"spl": "2025-01-01",
"severity": "High"
}