CVE-2022-20483: Out-of-Bounds Read in Bluetooth AVRC
Summary
CVE-2022-20483: In several functions that parse avrc response in avrc_pars_ct.cc and related files, there are possible out of bounds reads due to integer overflows. Affects platform/system/bt across 3 version ranges.
>= 10:0, < 10:2022-12-01
>= 11:0, < 11:2022-12-01
>= 12:0, < 12:2022-12-01
Fixed in 10:2022-12-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Bluetooth package in the Android ecosystem is responsible for handling Bluetooth functionality on Android devices. It provides support for various Bluetooth profiles and protocols, including the Audio/Video Remote Control (AVRC) profile. AVRC allows users to control media playback on remote devices. However, a vulnerability has been discovered in the AVRC implementation that could lead to remote information disclosure.
Vulnerability Detail
The vulnerability exists in several functions within the avrc_pars_ct.cc and related files, which parse AVRC responses. Due to integer overflows, these functions may perform out-of-bounds reads, potentially exposing sensitive information. Exploiting this vulnerability does not require any additional execution privileges or user interaction. The impact of this vulnerability is remote information disclosure.
How To Fix
Minimum fixed version
10:2022-12-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, no known workarounds are available for this vulnerability. It is recommended to apply the fix provided by updating the Bluetooth package.
Conclusion
In conclusion, the Bluetooth AVRC implementation in the Android ecosystem is vulnerable to an out-of-bounds read vulnerability. This vulnerability could lead to remote information disclosure. It is recommended to update the Bluetooth package to the fixed version to mitigate this vulnerability. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for platform/system/bt →
FAQ
The vulnerability allows for remote information disclosure, potentially exposing sensitive data.
No, user interaction is not needed for exploitation.
The vulnerability affects Android versions 10 and above.
Currently, there are no known mitigations other than applying the provided fix.
For more information, you can refer to the vulnerability details in the Android Open Source Vulnerability database: [link to vulnerability details].
Related vulnerabilities
Recent vulnerabilities recorded for platform/system/bt.
