CVE-2023-20984: Out of Bounds Read in libbtif
Summary
CVE-2023-20984: In ParseBqrLinkQualityEvt of btif_bqr.cc, there is a possible out of bounds read due to a missing bounds check. Affects platform/packages/modules/Bluetooth across 2 version ranges.
>= 13:0, < 13:2023-06-01
>= 13-next:0, < 13-next:2023-06-01
Fixed in 13-next:2023-06-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The package under scrutiny is platform/packages/modules/Bluetooth in the Android ecosystem. This package provides functionality related to Bluetooth communication on Android devices. It includes various modules and components for Bluetooth operations. One of the components is btif_bqr.cc, which handles Bluetooth Quality Report (BQR) events. BQR events provide information about the link quality of Bluetooth connections. The vulnerability resides in the ParseBqrLinkQualityEvt function of btif_bqr.cc.
Vulnerability Detail
The vulnerability (CVE-2023-20984) is an out-of-bounds read issue in the ParseBqrLinkQualityEvt function of btif_bqr.cc. Due to a missing bounds check, an attacker can trigger an out-of-bounds read, potentially leading to local information disclosure. Exploiting this vulnerability requires system execution privileges, and user interaction is not necessary. The impact of this vulnerability can be significant as it can expose sensitive information to an attacker.
How To Fix
Minimum fixed version
13-next:2023-06-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The vulnerability (CVE-2023-20984) in the libbtif package of the Android Bluetooth module allows for an out-of-bounds read, potentially leading to local information disclosure. It is important to update to the fixed version of the module to prevent exploitation of this vulnerability.
See every vulnerability recorded for platform/packages/modules/Bluetooth →
FAQ
The impact of this vulnerability is local information disclosure, which can expose sensitive data to an attacker.
No, user interaction is not needed for exploitation of this vulnerability.
System execution privileges are needed to exploit this vulnerability.
The affected package is platform/packages/modules/Bluetooth in the Android ecosystem. The vulnerability was introduced in version 13-next and fixed in version 13-next on June 1, 2023.
More information about the fix can be found in the commit linked in the 'how_to_fix' section.
References
Related vulnerabilities
Recent vulnerabilities recorded for platform/packages/modules/Bluetooth.
