CVE-2024-43096: Bluetooth Module in Android Suffers from Out of Bounds Write Vulnerability
Summary
CVE-2024-43096: In build_read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to a missing bounds check. Affects platform/packages/modules/Bluetooth across 4 version ranges.
>= 13:0, < 13:2025-01-01
>= 14:0, < 14:2025-01-01
>= 15:0, < 15:2025-01-01
>= 15-next:0, < 15-next:2025-01-01
Fixed in 15-next:2025-01-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Bluetooth module in Android is a critical component that facilitates wireless communication between devices. It supports various profiles and protocols, enabling functionalities such as file transfer, audio streaming, and device pairing. The module is widely used across Android devices, making its security paramount. This vulnerability specifically affects the GATT (Generic Attribute Profile) service, which is responsible for managing data exchange between Bluetooth devices.
Vulnerability Detail
In the Bluetooth module, specifically in the build_read_multi_rsp function within gatt_sr.cc, there exists a potential out of bounds write due to a missing bounds check. This flaw can be exploited by an attacker in proximity to the device, allowing for remote code execution without requiring additional execution privileges. The vulnerability poses a critical risk as it could lead to unauthorized access and manipulation of the device's functionality.
How To Fix
Minimum fixed version
15-next:2025-01-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can disable Bluetooth functionality on their devices until the patch is applied. This can be done through the device settings under the Bluetooth section.
Conclusion
The CVE-2024-43096 vulnerability in the Android Bluetooth module poses a significant risk due to its potential for remote code execution. Users are strongly encouraged to update their devices to the patched versions to mitigate this risk. Temporary workarounds, such as disabling Bluetooth, can provide additional safety until updates are applied.
See every vulnerability recorded for platform/packages/modules/Bluetooth →
FAQ
CVE-2024-43096 is a vulnerability in the Bluetooth module of Android that allows for remote code execution due to an out of bounds write.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The risks include unauthorized access to device functionalities and potential manipulation of data, which could compromise user privacy and security.
Yes, the permanent fix is to update the Bluetooth module to the latest patched version as specified in the how-to-fix section.
If you cannot update your device, it is advisable to disable Bluetooth functionality until a patch is available.
Related vulnerabilities
Recent vulnerabilities recorded for platform/packages/modules/Bluetooth.
