CVE-2023-21188: Heap Buffer Overflow in com.google.android.bluetooth
Summary
CVE-2023-21188: In btm_ble_update_inq_result of btm_ble_gap.cc, there is a possible out of bounds read due to a heap buffer overflow. Affects platform/packages/modules/Bluetooth across 2 version ranges.
>= 13:0, < 13:2023-06-01
>= 13-next:0, < 13-next:2023-06-01
Fixed in 13-next:2023-06-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The com.google.android.bluetooth package is a component of the Android Bluetooth module. It provides functionality for Bluetooth communication on Android devices. This package is responsible for managing Bluetooth Low Energy (BLE) connections and handling various Bluetooth operations. The vulnerability described in this report affects the com.google.android.bluetooth package and can potentially lead to local information disclosure.
Vulnerability Detail
The vulnerability exists in the btm_ble_update_inq_result function of the btm_ble_gap.cc file in the com.google.android.bluetooth package. It is caused by a heap buffer overflow, which can result in an out of bounds read. An attacker could exploit this vulnerability to disclose sensitive information from the affected system. The vulnerability requires system execution privileges, but does not require user interaction for exploitation.
How To Fix
Minimum fixed version
13-next:2023-06-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround provided for this vulnerability. It is recommended to apply the fix mentioned in the 'how_to_fix' section to address the issue.
Conclusion
The com.google.android.bluetooth package in Android is vulnerable to a heap buffer overflow, which can lead to local information disclosure. It is recommended to update the package to the fixed version to mitigate the risk of exploitation.
See every vulnerability recorded for platform/packages/modules/Bluetooth →
FAQ
com.google.android.bluetooth is a package in the Android Bluetooth module that handles Bluetooth communication on Android devices.
This vulnerability can potentially lead to local information disclosure on the affected system.
System execution privileges are needed to exploit this vulnerability.
No, user interaction is not needed for exploitation of this vulnerability.
To fix this vulnerability, update the com.google.android.bluetooth package to version 13-next:2023-06-01 or later.
References
Related vulnerabilities
Recent vulnerabilities recorded for platform/packages/modules/Bluetooth.
