Lucene search
HistoryDec 04, 2023 - 11:15 p.m.
CVE-2023-45773
btm_ble_gap
out of bounds
local escalation
privilege escalation
user execution
exploitation
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
5.1%
In multiple functions of btm_ble_gap.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.
Affected configurations
Node
googleandroidMatch13.0
ORgoogleandroidMatch14.0
Related
cve
cve
CVE-2023-45773
2023-12-04 23:15:26
prion
prion
Out-of-bounds
2023-12-04 23:15:00
cvelist
cvelist
CVE-2023-45773
2023-12-04 22:40:54
osv
osv
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
5.1%
Related for NVD:CVE-2023-45773