[Out of Bounds Write in attp_build_value_cmd in libbt-stack]

2024-03-0100:00:00

Google

osv.dev

attp_build_value_cmd

att_protocol.cc

out of bounds write

missing bounds check

remote code execution

software vulnerability

no user interaction

7.8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

JSON

In attp_build_value_cmd of att_protocol.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

CPENameOperatorVersion
platform/packages/modules/bluetootheq12L
platform/packages/modules/bluetootheq14
platform/packages/modules/bluetootheq13
platform/packages/modules/bluetootheq12

Name	Operator	Version
platform/packages/modules/bluetooth	eq	12L
platform/packages/modules/bluetooth	eq	14
platform/packages/modules/bluetooth	eq	13
platform/packages/modules/bluetooth	eq	12