Lucene search

K
osvGoogleOSV:ASB-A-162497143
HistoryNov 01, 2020 - 12:00 a.m.

Security fix introduced use after free when a remote device uses the sample LTK

2020-11-0100:00:00
Google
osv.dev
12
security fix
use after free
memory corruption
code execution
bluetooth server
user interaction
software

EPSS

0.001

Percentile

46.9%

In btm_sec_disconnected of btm_sec.cc, there is a possible memory corruption due to a use after free. This could lead to remote code execution in the Bluetooth server with no additional execution privileges needed. User interaction is needed for exploitation.

EPSS

0.001

Percentile

46.9%

Related for OSV:ASB-A-162497143