Lucene search
PRIOn knowledge basePRION:CVE-2023-40090HistoryDec 04, 2023 - 11:15 p.m.
Design/Logic Flaw
2023-12-0423:15:00
PRIOn knowledge base
www.prio-n.com
6
btm_bleverifysignature
signature validation
privilege escalation
side channel disclosure
remote exploitation
In BTM_BleVerifySignature of btm_ble.cc, there is a possible way to bypass signature validation due to side channel information disclosure. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Related
osv
osv
[Bluetooth][BTM] BTM_BleVerifySignature side-channel attack possibility
2023-12-01 00:00:00
cvelist
cvelist
CVE-2023-40090
2023-12-04 22:40:53
cve
cve
CVE-2023-40090
2023-12-04 23:15:24
cnvd
cnvd
Google Android elevation of privilege vulnerability (CNVD-2024-07127)
2023-12-06 00:00:00
nvd
nvd
CVE-2023-40090
2023-12-04 23:15:24