CVE-2022-20140: Out of Bounds Write in build_read_multi_rsp Function in Bluetooth
Summary
CVE-2022-20140: In read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to an incorrect bounds check. Affects platform/packages/modules/Bluetooth versions >= 12L-next:0, < 12L-next:2022-06-01. Fixed in 12L-next:2022-06-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The package under scrutiny is platform/system/bt, which is a component of the Android ecosystem. It is responsible for handling Bluetooth functionality on Android devices. Bluetooth is a wireless communication technology that allows devices to exchange data over short distances. The platform/system/bt package provides the necessary software infrastructure for Bluetooth communication, including protocols and APIs. This vulnerability affects the build_read_multi_rsp function in the gatt_sr.cc file of the package.
Vulnerability Detail
The vulnerability, identified as CVE-2022-20140, resides in the read_multi_rsp function of the gatt_sr.cc file in the platform/system/bt package. It is caused by an incorrect bounds check, leading to an out-of-bounds write. An attacker can exploit this vulnerability remotely without requiring any additional execution privileges or user interaction. The consequences of successful exploitation include remote escalation of privilege. This vulnerability is classified as critical.
How To Fix
Minimum fixed version
12L-next:2022-06-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
In conclusion, the platform/system/bt package in the Android ecosystem is vulnerable to an out-of-bounds write vulnerability in the build_read_multi_rsp function. This critical vulnerability can be exploited remotely without user interaction, potentially leading to remote escalation of privilege. It is crucial to update the package to the fixed version and follow best practices for secure coding. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for platform/packages/modules/Bluetooth →
FAQ
The impact of this vulnerability is remote escalation of privilege, which can allow an attacker to gain unauthorized access to sensitive information or perform malicious actions on the affected device.
No, user interaction is not needed for exploitation of this vulnerability.
This vulnerability is classified as critical due to its potential for remote escalation of privilege.
Yes, all versions of the platform/system/bt package up to and including version 12 are affected by this vulnerability.
No, there is no specific workaround mentioned for this vulnerability. It is recommended to apply the provided fix to address the issue.
Related vulnerabilities
Recent vulnerabilities recorded for platform/packages/modules/Bluetooth.
