CVE-2023-35657: Bluetooth Module in Android Suffers from Out of Bounds Read Vulnerability
Summary
CVE-2023-35657: In bta_av_config_ind of bta_av_aact.cc, there is a possible out of bounds read due to type confusion. Affects platform/packages/modules/Bluetooth across 4 version ranges.
>= 13:0, < 13:2025-05-01
>= 14:0, < 14:2025-05-01
>= 15:0, < 15:2025-05-01
>= 15-next:0, < 15-next:2025-05-01
Fixed in 15-next:2025-05-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Bluetooth module in Android is a critical component that facilitates wireless communication between devices. It supports various profiles and protocols, enabling functionalities such as audio streaming, file transfers, and device pairing. This module is widely used across Android devices, making its security paramount. The vulnerability in question arises from a flaw in the bta_av_config_ind function, which can lead to potential information disclosure.
Vulnerability Detail
In the bta_av_config_ind function of bta_av_aact.cc, a type confusion issue can lead to an out of bounds read. This vulnerability allows an attacker to access sensitive information without requiring additional execution privileges or user interaction. The flaw is particularly concerning as it could expose local data, potentially leading to further exploitation.
How To Fix
Minimum fixed version
15-next:2025-05-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, no specific workarounds are provided for this vulnerability. It is recommended to apply the patch as soon as it becomes available to mitigate any risks associated with this issue.
Conclusion
The CVE-2023-35657 vulnerability in the Android Bluetooth module poses a significant risk due to its potential for local information disclosure. Users are strongly encouraged to update their systems to the patched version to mitigate this risk. Regular monitoring and prompt updates are essential for maintaining security.
See every vulnerability recorded for platform/packages/modules/Bluetooth →
FAQ
CVE-2023-35657 is a vulnerability in the Bluetooth module of Android that allows for an out of bounds read due to type confusion, potentially leading to information disclosure.
You can check if your application is affected by using the Vulert playground at Vulert Scanner, which monitors open-source vulnerabilities in real-time without requiring any signup.
The primary risk is local information disclosure, which could expose sensitive data to unauthorized users without requiring additional privileges.
To apply the patch, update your Bluetooth module to the fixed version available in the Android source repository. Follow the provided links for detailed instructions.
Currently, there are no specific workarounds available. It is advisable to apply the patch as soon as it is released.
Related vulnerabilities
Recent vulnerabilities recorded for platform/packages/modules/Bluetooth.
