CVE-2022-20010: Incorrect bounds check in l2cble_process_sig_cmd()
Summary
CVE-2022-20010: In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to an incorrect bounds check. Affects platform/system/bt across 2 version ranges.
>= 12:0, < 12:2022-05-01
>= 12L:0, < 12L:2022-05-01
Fixed in 12:2022-05-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The package 'platform/system/bt' is part of the Android ecosystem and is responsible for handling Bluetooth functionality. It provides the necessary components and protocols for Bluetooth communication on Android devices. The vulnerability affects the 'l2cble_process_sig_cmd' function in the 'l2c_ble.cc' file. This function is responsible for processing signaling commands in the Bluetooth Low Energy (BLE) protocol. The incorrect bounds check in this function can lead to an out of bounds read, potentially resulting in remote information disclosure through Bluetooth. This vulnerability does not require any additional execution privileges and does not rely on user interaction.
Vulnerability Detail
The vulnerability arises from an incorrect bounds check in the 'l2cble_process_sig_cmd' function. Due to this flaw, an attacker can trigger an out of bounds read, potentially leaking sensitive information. The vulnerability can be exploited remotely through Bluetooth without requiring any additional privileges. The impact of this vulnerability is the potential disclosure of information that should be kept confidential. It is important to note that this vulnerability does not require any user interaction for exploitation.
How To Fix
Minimum fixed version
12:2022-05-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. The recommended approach is to apply the fix by updating the affected package to a version that includes the necessary corrections.
Conclusion
The vulnerability in the 'platform/system/bt' package, specifically in the 'l2cble_process_sig_cmd' function, can lead to remote information disclosure through Bluetooth. It is crucial to update the package to a fixed version to mitigate the risk of sensitive data exposure. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for platform/system/bt →
FAQ
The vulnerability can lead to remote information disclosure through Bluetooth, potentially exposing sensitive data.
No, this vulnerability does not require any user interaction for exploitation.
No additional execution privileges are needed to exploit this vulnerability.
To fix this vulnerability, update the 'platform/system/bt' package to a version that includes the fix.
No specific workaround is mentioned. It is recommended to apply the fix by updating the affected package.
Related vulnerabilities
Recent vulnerabilities recorded for platform/system/bt.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
