CVE-2024-0031: Out of Bounds Write in libbt-stack
Summary
CVE-2024-0031: In attp_build_read_by_type_value_cmd of att_protocol.cc , there is a possible out of bounds write due to improper input validation. Affects platform/packages/modules/Bluetooth across 3 version ranges.
>= 13:0, < 13:2024-02-01
>= 14:0, < 14:2024-02-01
>= 14-next:0, < 14-next:2024-02-01
Fixed in 14-next:2024-02-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The package under scrutiny is the Bluetooth module in the Android platform. This module provides functionality for Bluetooth communication on Android devices. It allows users to connect and interact with Bluetooth devices such as headphones, speakers, and smartwatches. The vulnerability in question affects the libbt-stack library, specifically the attp_build_read_by_type_value_cmd function in att_protocol.cc.
Vulnerability Detail
The vulnerability is an out of bounds write issue caused by improper input validation in the attp_build_read_by_type_value_cmd function. This vulnerability can be exploited remotely, leading to potential remote code execution without requiring additional execution privileges. It is important to note that user interaction is not necessary for exploitation. The vulnerability was first published on February 1, 2024, and its severity is classified as critical.
How To Fix
Minimum fixed version
14-next:2024-02-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No specific workaround has been mentioned for this vulnerability.
Conclusion
In conclusion, the CVE-2024-0031 vulnerability in the libbt-stack library of the Bluetooth module in the Android platform allows for potential remote code execution. It is crucial to apply the provided fix from the Android Open Source Project to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for platform/packages/modules/Bluetooth →
FAQ
The impact of this vulnerability is the potential for remote code execution on Android devices with the affected Bluetooth module. An attacker could exploit this vulnerability without requiring any user interaction.
No known exploit has been reported for this vulnerability at the time of this report.
The vulnerability affects Android versions 11, 12, 12L, 13, and 14.
The recommended mitigation is to apply the provided fix from the Android Open Source Project.
No, user interaction is not needed for exploitation of this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for platform/packages/modules/Bluetooth.
