CVEvulnerability
CVE-2023-21197
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-06-28
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-125
Description
In btm_acl_process_sca_cmpl_pkt of btm_acl.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-251427561
Affected configurations
• google android 13.0
Related
Weakness · CWE (1)
- CWE-125 Out-of-bounds Read weakness
References
- https://source.android.com/security/bulletin/pixel/2023-06-01 Vendor Advisory
- https://source.android.com/security/bulletin/pixel/2023-06-01 Vendor Advisory