CVE-2023-21130: Out-of-Bounds Read in btm_ble_periodic_adv_sync_lost Function in Bluetooth Module
Summary
CVE-2023-21130: In btm_ble_periodic_adv_sync_lost of btm_ble_gap.cc, there is a possible remote code execution due to a buffer overflow. Affects platform/packages/modules/Bluetooth across 2 version ranges.
>= 13:0, < 13:2023-06-01
>= 13-next:0, < 13-next:2023-06-01
Fixed in 13-next:2023-06-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Bluetooth module is a component of the Android platform that provides support for Bluetooth functionality. It allows devices to communicate wirelessly over short distances, enabling features such as file transfer, audio streaming, and device pairing. The btm_ble_periodic_adv_sync_lost function in the Bluetooth module is responsible for handling periodic advertising synchronization lost events. This vulnerability affects the module's implementation of this function.
Vulnerability Detail
The vulnerability identified as CVE-2023-21130 is an out-of-bounds read issue in the btm_ble_periodic_adv_sync_lost function of the Bluetooth module's btm_be_gap.cc file. This vulnerability could potentially be exploited to achieve remote code execution without requiring any additional execution privileges. An attacker could trigger a buffer overflow, leading to the execution of arbitrary code. Exploitation of this vulnerability does not require user interaction.
How To Fix
Minimum fixed version
13-next:2023-06-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
The vulnerability identified as CVE-2023-21130 in the Bluetooth module's btm_be_gap.cc file could potentially allow remote code execution without requiring additional execution privileges. It is crucial to update the affected package to version 13.2023-06-01 or later to mitigate this vulnerability. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for platform/packages/modules/Bluetooth →
FAQ
This vulnerability could allow an attacker to execute arbitrary code remotely without requiring any additional privileges. Exploitation of this vulnerability could lead to a compromise of the affected device's security and potentially enable further attacks.
No, user interaction is not needed for exploitation of this vulnerability. An attacker can trigger the buffer overflow remotely without any user involvement.
The vulnerability affects versions 13.0 and later of the Bluetooth package in the Android ecosystem.
No specific workarounds have been provided for this vulnerability. It is recommended to apply the available fix by updating to the patched version of the affected package.
More information about this vulnerability can be found in the official Android Security Bulletin: [https://storage.googleapis.com/android-osv/ASB-A-273502002.json].
Related vulnerabilities
Recent vulnerabilities recorded for platform/packages/modules/Bluetooth.
