CVE-2022-20445: Out of Bounds Read in Bluetooth process_service_search_rsp Function
Summary
CVE-2022-20445: In process_service_search_rsp of sdp_discovery.cc, there is a possible out of bounds read due to improper input validation. Affects platform/system/bt across 3 version ranges.
>= 10:0, < 10:2022-11-01
>= 11:0, < 11:2022-11-01
>= 12:0, < 12:2022-11-01
Fixed in 10:2022-11-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Bluetooth package is a module in the Android ecosystem that provides functionality for Bluetooth communication. It allows devices to connect and exchange data wirelessly. The process_service_search_rsp function in sdp_discovery.cc is responsible for handling service search responses during Bluetooth discovery. This function is vulnerable to an out of bounds read due to improper input validation.
Vulnerability Detail
The vulnerability occurs when the process_service_search_rsp function in sdp_discovery.cc fails to properly validate input data. This can lead to an out of bounds read, allowing an attacker to access sensitive information from the device's memory. Exploiting this vulnerability does not require user interaction and can result in remote information disclosure. The impact of this vulnerability is high as it can expose sensitive data without requiring additional execution privileges.
How To Fix
Minimum fixed version
10:2022-11-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability at the moment.
Conclusion
The Bluetooth package in the Android ecosystem is vulnerable to an out of bounds read in the process_service_search_rsp function. This vulnerability can lead to remote information disclosure without requiring user interaction. Developers should update the Bluetooth package to the fixed version released on or after November 1, 2022. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for platform/system/bt →
FAQ
The impact of this vulnerability is high as it can lead to remote information disclosure without requiring additional execution privileges.
No, user interaction is not needed for exploitation of this vulnerability.
Versions 10, 11, 12, 12L, and 13 of the Android ecosystem are affected by this vulnerability.
The fix for this vulnerability is available in versions 10, 11, 12, 12L, and 13 of the Android ecosystem. Developers should update the Bluetooth package to the version released on or after November 1, 2022.
More information about this vulnerability can be found in the vulnerability database: https://storage.googleapis.com/android-osv/ASB-A-225876506.json
Related vulnerabilities
Recent vulnerabilities recorded for platform/system/bt.
