In addattr of sdpdiscovery.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
{ "types": [ "ID" ], "severity": "High", "vanir_signatures": [ { "digest": { "function_hash": "116130474502739399110114672412830762672", "length": 4206.0 }, "id": "ASB-A-367274727-2c8ede02", "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/a1dee2afab2b7e422e0f763cdcf3b7ee9fcddd12", "deprecated": false, "signature_version": "v1", "signature_type": "Function", "target": { "file": "system/stack/sdp/sdp_discovery.cc", "function": "add_attr" } }, { "digest": { "threshold": 0.9, "line_hashes": [ "252881311833985768700058607908209012282", "56949618601691913258921739783032460786", "229309298086332723232242113337165226429" ] }, "id": "ASB-A-367274727-aa611b02", "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/a1dee2afab2b7e422e0f763cdcf3b7ee9fcddd12", "deprecated": false, "signature_version": "v1", "signature_type": "Line", "target": { "file": "system/stack/sdp/sdp_discovery.cc" } } ], "fixes": [ "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/a1dee2afab2b7e422e0f763cdcf3b7ee9fcddd12" ], "spl": "2025-06-01" }
{ "types": [ "ID" ], "severity": "High", "vanir_signatures": [ { "digest": { "function_hash": "282266430492140731205215715167930485543", "length": 4182.0 }, "id": "ASB-A-367274727-0dc27b44", "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/655ceaa67a408f37c8e432e97bea0bcedeb8f478", "deprecated": false, "signature_version": "v1", "signature_type": "Function", "target": { "file": "system/stack/sdp/sdp_discovery.cc", "function": "add_attr" } }, { "digest": { "threshold": 0.9, "line_hashes": [ "252881311833985768700058607908209012282", "56949618601691913258921739783032460786", "229309298086332723232242113337165226429" ] }, "id": "ASB-A-367274727-7e0afc47", "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/655ceaa67a408f37c8e432e97bea0bcedeb8f478", "deprecated": false, "signature_version": "v1", "signature_type": "Line", "target": { "file": "system/stack/sdp/sdp_discovery.cc" } } ], "fixes": [ "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/655ceaa67a408f37c8e432e97bea0bcedeb8f478" ], "spl": "2025-06-01" }
{ "types": [ "ID" ], "severity": "High", "vanir_signatures": [ { "digest": { "function_hash": "260809324934765456341481396104829020622", "length": 4232.0 }, "id": "ASB-A-367274727-10c65c94", "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/3e234b3e3c0a5e3789a38159854bf0b8a774b980", "deprecated": false, "signature_version": "v1", "signature_type": "Function", "target": { "file": "system/stack/sdp/sdp_discovery.cc", "function": "add_attr" } }, { "digest": { "threshold": 0.9, "line_hashes": [ "252881311833985768700058607908209012282", "56949618601691913258921739783032460786", "229309298086332723232242113337165226429" ] }, "id": "ASB-A-367274727-94d4af7a", "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/3e234b3e3c0a5e3789a38159854bf0b8a774b980", "deprecated": false, "signature_version": "v1", "signature_type": "Line", "target": { "file": "system/stack/sdp/sdp_discovery.cc" } } ], "fixes": [ "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/3e234b3e3c0a5e3789a38159854bf0b8a774b980" ], "spl": "2025-06-01" }
{ "types": [ "ID" ], "severity": "High", "vanir_signatures": [ { "digest": { "function_hash": "260809324934765456341481396104829020622", "length": 4232.0 }, "id": "ASB-A-367274727-87bcd97c", "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/3e234b3e3c0a5e3789a38159854bf0b8a774b980", "deprecated": false, "signature_version": "v1", "signature_type": "Function", "target": { "file": "system/stack/sdp/sdp_discovery.cc", "function": "add_attr" } }, { "digest": { "threshold": 0.9, "line_hashes": [ "252881311833985768700058607908209012282", "56949618601691913258921739783032460786", "229309298086332723232242113337165226429" ] }, "id": "ASB-A-367274727-fe0ab9a7", "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/3e234b3e3c0a5e3789a38159854bf0b8a774b980", "deprecated": false, "signature_version": "v1", "signature_type": "Line", "target": { "file": "system/stack/sdp/sdp_discovery.cc" } } ], "fixes": [ "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/3e234b3e3c0a5e3789a38159854bf0b8a774b980" ], "spl": "2025-06-01" }