CVE-2023-20987: Out-of-Bounds Read in Bluetooth Stack
Summary
CVE-2023-20987: In btm_read_link_quality_complete of btm_acl.cc, there is a possible out of bounds read due to a missing bounds check. Affects platform/packages/modules/Bluetooth across 2 version ranges.
>= 13:0, < 13:2023-06-01
>= 13-next:0, < 13-next:2023-06-01
Fixed in 13-next:2023-06-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Bluetooth package in the Android ecosystem is responsible for handling Bluetooth functionality on Android devices. It provides APIs and protocols for establishing and managing Bluetooth connections. This package is vulnerable to an out-of-bounds read issue in the btm_read_link_quality_complete function of the btm_acl.cc file.
Vulnerability Detail
The btm_read_link_quality_complete function in the Bluetooth package of Android does not perform a proper bounds check, leading to an out-of-bounds read vulnerability. An attacker within Bluetooth range could exploit this vulnerability to disclose sensitive information from the affected device. This vulnerability requires system execution privileges, and no user interaction is necessary for exploitation.
How To Fix
Minimum fixed version
13-next:2023-06-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability.
Conclusion
The Bluetooth package in Android is vulnerable to an out-of-bounds read issue, which could allow an attacker to disclose sensitive information from the affected device. It is crucial to update the package to a fixed version to mitigate this vulnerability.
See every vulnerability recorded for platform/packages/modules/Bluetooth →
FAQ
This vulnerability allows an attacker within Bluetooth range to read sensitive information from the affected device.
System execution privileges are needed to exploit this vulnerability.
No, user interaction is not needed for exploitation of this vulnerability.
The vulnerability is present in Android version 13-next. It is recommended to update to a fixed version to mitigate the issue.
No, there is no known workaround for this vulnerability.
References
Related vulnerabilities
Recent vulnerabilities recorded for platform/packages/modules/Bluetooth.
