CVE-2024-0030: Potential OOB Read in attp_build_value_cmd() of att_protocol.cc
Summary
CVE-2024-0030: In btif_to_bta_response of btif_gatt_util.cc, there is a possible out of bounds read due to an incorrect bounds check. Affects platform/packages/modules/Bluetooth across 3 version ranges.
>= 13:0, < 13:2024-02-01
>= 14:0, < 14:2024-02-01
>= 14-next:0, < 14-next:2024-02-01
Fixed in 14-next:2024-02-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The package under scrutiny is platform/packages/modules/Bluetooth, which is a component of the Android ecosystem. It is responsible for handling Bluetooth functionality on Android devices. This package allows users to connect and communicate with Bluetooth devices, enabling features such as file transfer, audio streaming, and device pairing. However, a vulnerability has been discovered in the package that could lead to local information disclosure.
Vulnerability Detail
The vulnerability exists in the btif_to_bta_response function of btif_gatt_util.cc. It is caused by an incorrect bounds check, which may result in an out-of-bounds read. This vulnerability can be exploited without requiring any additional execution privileges or user interaction. If successfully exploited, it could lead to the disclosure of sensitive information stored locally on the device. The vulnerability affects Android versions 11, 12, 12L, 13, and 14.
How To Fix
Minimum fixed version
14-next:2024-02-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No workaround has been provided for this vulnerability.
Conclusion
In conclusion, the platform/packages/modules/Bluetooth package in Android is vulnerable to a potential out-of-bounds read vulnerability. This vulnerability could lead to local information disclosure without requiring any additional execution privileges or user interaction. It is crucial for developers to update the package to the latest version to mitigate the risk of exploitation. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for platform/packages/modules/Bluetooth →
FAQ
The vulnerability could lead to local information disclosure, potentially exposing sensitive data stored on the device.
No, user interaction is not needed for exploitation of this vulnerability.
The vulnerability affects Android versions 11, 12, 12L, 13, and 14.
The severity of this vulnerability is classified as High.
You can find more information about this vulnerability in the Android Open Source Vulnerability database: https://storage.googleapis.com/android-osv/ASB-A-276898739.json
Related vulnerabilities
Recent vulnerabilities recorded for platform/packages/modules/Bluetooth.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
