ASB-A-269253349
Dashboard / Vulnerabilities / ASB-A-269253349
Summary:
Details: In bta_av_rc_msg of bta_av_act.cc, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
References: https://source.android.com/security/bulletin/2023-09-01, https://android.googlesource.com/platform/packages/modules/Bluetooth/+/b7ea57f620436c83a9766f928437ddadaa232e3a
Affected packages
Package
Name: platform/packages/modules/Bluetooth
Purl:
Affected ranges
Type: ECOSYSTEM
Events:
Introduced- 13-next:0
Fixed -13-next:2023-09-01
Affected versions
13-next
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
