Lucene search

[email protected]NVD:CVE-2023-21201

HistoryJun 28, 2023 - 6:15 p.m.

CVE-2023-21201

2023-06-2818:15:15

CWE-125

[email protected]

web.nvd.nist.gov

out of bounds read

btif_sdp_server.cc

android-13

denial of service

missing null check

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

35.3%

JSON

In on_create_record_event of btif_sdp_server.cc, there is a possible out of bounds read due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-263545186

Affected configurations

Nvd

Node

googleandroidMatch13.0

VendorProductVersionCPE
googleandroid13.0cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
google	android	13.0	cpe:2.3:o:google:android:13.0:::::::*

References

source.android.com/security/bulletin/pixel/2023-06-01

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

35.3%

JSON

Related for NVD:CVE-2023-21201

prion1 cvelist1 cve1