CVEvulnerability

CVE-2022-20010

6.5 MEDIUM Published 2022-05-10 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-05-10
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
3.3 LOW — AV:A/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-125

Description

In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure through Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12LAndroid ID: A-213519176

Affected configurations

• google android 12.0 • google android 12.1

Related

Weakness · CWE (1)

  • CWE-125 Out-of-bounds Read weakness

References