Crash in com.google.android.bluetooth
Summary
CVE-2023-40088: In callback_thread_event of com_android_bluetooth_btservice_AdapterService.cpp, there is a possible memory corruption due to a use after free. Affects platform/packages/modules/Bluetooth across 3 version ranges.
>= 13:0, < 13:2023-12-01
>= 14:0, < 14:2023-12-01
>= 14-next:0, < 14-next:2023-12-01
Fixed in 14-next:2023-12-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The com.google.android.bluetooth package is a part of the Android ecosystem and is responsible for handling Bluetooth functionality on Android devices. It provides APIs and services for Bluetooth communication, allowing devices to connect and exchange data wirelessly. This package is crucial for various applications and system components that rely on Bluetooth capabilities. However, a vulnerability has been discovered in this package that could lead to remote code execution.
Vulnerability Detail
The vulnerability exists in the callback_thread_event function of the com_android_bluetooth_btservice_AdapterService.cpp file. It is caused by a use-after-free issue, where a memory block is accessed after it has been freed. This can result in memory corruption and potentially allow an attacker to execute arbitrary code on the affected device. The vulnerability does not require any user interaction for exploitation, making it particularly dangerous. It has been assigned a severity rating of Critical.
How To Fix
Minimum fixed version
14-next:2023-12-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround provided for this vulnerability. The recommended approach is to apply the available fix by updating the com.google.android.bluetooth package.
Conclusion
The com.google.android.bluetooth package in the Android ecosystem is vulnerable to a critical remote code execution vulnerability. To mitigate this risk, it is crucial to update the package to the latest version available. Regularly checking for updates and promptly applying them is essential for maintaining the security of Bluetooth functionality on Android devices. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for platform/packages/modules/Bluetooth →
FAQ
com.google.android.bluetooth is a package in the Android ecosystem that handles Bluetooth functionality on Android devices. It provides APIs and services for Bluetooth communication.
This vulnerability could allow an attacker to execute arbitrary code on the affected device, potentially leading to remote code execution. It does not require any user interaction for exploitation.
To fix this vulnerability, update the com.google.android.bluetooth package to the latest version available. The fix has been implemented in versions 11, 12, 12L, 13, and 14 of the Android ecosystem.
No specific workaround is provided for this vulnerability. It is recommended to apply the available fix by updating the com.google.android.bluetooth package.
For more information about this vulnerability, you can refer to the provided source link: https://storage.googleapis.com/android-osv/ASB-A-291500341.json
Related vulnerabilities
Recent vulnerabilities recorded for platform/packages/modules/Bluetooth.
