CVE-2023-21199: Out of Bounds Read in Bluetooth Stack of Android
Summary
CVE-2023-21199: In btu_ble_proc_ltk_req of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. Affects platform/packages/modules/Bluetooth across 2 version ranges.
>= 13:0, < 13:2023-06-01
>= 13-next:0, < 13-next:2023-06-01
Fixed in 13-next:2023-06-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Bluetooth package in the Android platform is responsible for managing Bluetooth functionality on Android devices. It provides APIs and services for Bluetooth communication, including pairing, connecting, and data transfer between devices. The package is an integral part of the Android operating system and is used by various applications and system components.
Vulnerability Detail
The vulnerability (CVE-2023-21199) exists in the btu_ble_proc_ltk_req function of the Bluetooth stack in Android. It is caused by a missing bounds check, which can result in an out of bounds read. An attacker can exploit this vulnerability to gain access to sensitive information stored in memory, potentially leading to local information disclosure. The exploitation of this vulnerability requires system execution privileges and does not require any user interaction.
How To Fix
Minimum fixed version
13-next:2023-06-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No workaround has been provided for this vulnerability. It is recommended to apply the fix as soon as possible.
Conclusion
The btu_ble_proc_ltk_req function in the Bluetooth stack of Android is vulnerable to an out of bounds read, which can lead to local information disclosure. Developers should apply the provided fix to mitigate this vulnerability.
See every vulnerability recorded for platform/packages/modules/Bluetooth →
FAQ
The vulnerability allows an attacker to read sensitive information from memory, potentially leading to local information disclosure.
No, the exploitation of this vulnerability does not require any user interaction.
System execution privileges are required to exploit this vulnerability.
No, there is no workaround available. It is recommended to apply the provided fix.
The fix for this vulnerability can be found in the Android Open Source Project. Please refer to the provided link for more details.
References
Related vulnerabilities
Recent vulnerabilities recorded for platform/packages/modules/Bluetooth.
