CVE-2024-0039: Out of Bounds Write in attp_build_value_cmd in libbt-stack
Summary
CVE-2024-0039: In attp_build_value_cmd of att_protocol.cc, there is a possible out of bounds write due to a missing bounds check. Affects platform/packages/modules/Bluetooth across 3 version ranges.
>= 13:0, < 13:2024-03-01
>= 14:0, < 14:2024-03-01
>= 14-next:0, < 14-next:2024-03-01
Fixed in 14-next:2024-03-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The package under scrutiny is the Bluetooth module in the Android platform. This module is responsible for handling Bluetooth functionality on Android devices. It allows users to connect and communicate with other Bluetooth-enabled devices. The vulnerability affects versions 12, 12L, 13, and 14 of the Android platform. It is a critical vulnerability that could potentially lead to remote code execution without requiring any additional execution privileges. Exploitation of this vulnerability does not require user interaction.
Vulnerability Detail
The vulnerability exists in the attp_build_value_cmd function of the att_protocol.cc file. It is caused by a missing bounds check, which can result in an out of bounds write. An attacker could exploit this vulnerability to execute arbitrary code on the affected device. The impact of this vulnerability is severe, as it could allow an attacker to gain control over the device without the user's knowledge or consent.
How To Fix
Minimum fixed version
14-next:2024-03-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No specific workaround has been mentioned for this vulnerability.
Conclusion
In conclusion, the CVE-2024-0039 vulnerability in the Bluetooth module of the Android platform poses a critical risk of remote code execution. It is crucial to update the affected Android platform versions to the fixed versions released on or after March 1, 2024. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for platform/packages/modules/Bluetooth →
FAQ
The impact of this vulnerability is critical, as it could lead to remote code execution on the affected device without requiring any additional execution privileges.
No, user interaction is not needed for exploitation of this vulnerability.
Versions 12, 12L, 13, and 14 of the Android platform are affected by this vulnerability.
To fix this vulnerability, it is recommended to update the affected Android platform versions to the fixed versions released on or after March 1, 2024.
For more information about this vulnerability, you can refer to the source provided by the Android Open Source Project: https://storage.googleapis.com/android-osv/ASB-A-295887535.json
References
Related vulnerabilities
Recent vulnerabilities recorded for platform/packages/modules/Bluetooth.
