PUB-A-260569449
See a problem?- Import Source
- https://storage.googleapis.com/android-osv/PUB-A-260569449.json
- JSON Data
- https://api.osv.dev/v1/vulns/PUB-A-260569449
- Aliases
-
- A-260569449
- CVE-2023-20983
- Published
- 2023-06-01T00:00:00Z
- Modified
- 2024-08-29T07:13:13.835939Z
- Summary
- oob read due to missing length check in btm_ble_rand_enc_complete() of bluetooth stack
- Details
-
In btmblerandenccomplete of btm_ble.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
- References
Affected packages
Android / platform/packages/modules/Bluetooth
Package
Ecosystem specific
{
"vanir_signatures": [
{
"digest": {
"length": 178.0,
"function_hash": "12324704330797105710520765979553565911"
},
"id": "PUB-A-260569449-0417fb4f",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/678d7b820f377b129dcdbb7d9916a321c25bb7d5",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "system/test/mock/mock_stack_btm_ble.cc",
"function": "btm_ble_rand_enc_complete"
},
"signature_type": "Function"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"224161529344046936049177692569849198118",
"217438565200487619838275810707526204826",
"111291995599213537043021434985610372809",
"97541988460063341010316638755451632417"
]
},
"id": "PUB-A-260569449-16c98f09",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/678d7b820f377b129dcdbb7d9916a321c25bb7d5",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "system/stack/btu/btu_hcif.cc"
},
"signature_type": "Line"
},
{
"match_only_versions": [
"13-next"
],
"digest": {
"threshold": 0.9,
"line_hashes": [
"313371911573586658228018128838215648498",
"4690809711081223181750630714514388859",
"309782683119757118646700257314011791564",
"315315486998765414351497729550439575724"
]
},
"id": "PUB-A-260569449-4ceb7050",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/678d7b820f377b129dcdbb7d9916a321c25bb7d5",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "system/stack/include/ble_hci_link_interface.h"
},
"signature_type": "Line"
},
{
"match_only_versions": [
"13-next"
],
"digest": {
"length": 503.0,
"function_hash": "242226141316977193257776497942385063952"
},
"id": "PUB-A-260569449-5d2e2eea",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/678d7b820f377b129dcdbb7d9916a321c25bb7d5",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "system/stack/btm/btm_ble.cc",
"function": "btm_ble_rand_enc_complete"
},
"signature_type": "Function"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"65326591185155806798731282979164782553",
"190747945663110882946648974928134239695",
"167901755996270072300021354304720775813",
"206977422755948296639786176225388658574",
"22794000547993259028642115759942653687",
"38778571378476974055435767296346293479",
"154015597657473939734559147436263244719"
]
},
"id": "PUB-A-260569449-74d2281f",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/678d7b820f377b129dcdbb7d9916a321c25bb7d5",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "system/test/mock/mock_stack_btm_ble.cc"
},
"signature_type": "Line"
},
{
"digest": {
"length": 2138.0,
"function_hash": "30959802940329759862659041583166081994"
},
"id": "PUB-A-260569449-7a771c21",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/678d7b820f377b129dcdbb7d9916a321c25bb7d5",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "system/stack/btu/btu_hcif.cc",
"function": "btu_hcif_hdl_command_complete"
},
"signature_type": "Function"
},
{
"match_only_versions": [
"13-next"
],
"digest": {
"threshold": 0.9,
"line_hashes": [
"80674951492990122575347656846292152695",
"18376419578549212706905165371280563403",
"277048849032806832997747997065648081505",
"332349706291993620572404588489303378896",
"134839501037574561200844653805349984347",
"145246554979485156081978610762041234426",
"107699788049404248499894625830070853182",
"252428581946088468030393579642186282934",
"34091773844244285523001292683419216754",
"50645818859145066048379539153003406511",
"299128413497606640257411112678203106640",
"58252560446575377289715788461584297441",
"131990504168270375025398946880337013710",
"236317222999668950275625605714186850203",
"29887575839910444504096383204803669044",
"5362790294183309087492498058350516606",
"122057933184607078545555076385749223904",
"116544564171286854822026167827041756901",
"114272965988662198401716015210233701914"
]
},
"id": "PUB-A-260569449-908fc539",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/678d7b820f377b129dcdbb7d9916a321c25bb7d5",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "system/stack/btm/btm_ble.cc"
},
"signature_type": "Line"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"117784653552321564358471851936625549508",
"47333122460676538759491455797197126117",
"291796459590222092951770975161402356361",
"184229502923043041024834374352615618277",
"279361614689686598980594842686935201696",
"203958438365526106154898523198184834099",
"26190922315788100689696447141390682060",
"245532789990840797891332040715052709773",
"304541487980214799526866154873465333991",
"292658284489376623161506992059026492619"
]
},
"id": "PUB-A-260569449-9d84ed02",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/678d7b820f377b129dcdbb7d9916a321c25bb7d5",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "system/test/mock/mock_stack_btm_ble.h"
},
"signature_type": "Line"
}
],
"fixes": [
"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/678d7b820f377b129dcdbb7d9916a321c25bb7d5"
],
"spl": "2023-06-01",
"severity": "Moderate",
"types": [
"ID"
]
}