ASB-A-205837191

In avrcctrlparsvendorrsp of avrcparsct.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2022-6906 · Bluez +3 · Bluez +3

Name of the Vulnerable Software and Affected Versions: BlueZ versions prior to 5.59 Description: The issue is related to insufficient validation of params len in the profiles/audio/avrcp.c component of BlueZ, allowing physically proximate attackers to obtain sensitive information. This could...

CVE-2020-0286

In Bluetooth AVRCP, there is a possible leak of audio metadata due to residual data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150214479...

Information disclosure

In Bluetooth AVRCP, there is a possible leak of audio metadata due to residual data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150214479...

CVE-2020-0286

In Bluetooth AVRCP, there is a possible leak of audio metadata due to residual data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150214479...

CVE-2020-0286

The CVE-2020-0286 entry describes a vulnerability in Android 11's Bluetooth AVRCP where residual data can leak audio metadata, enabling remote information disclosure without privileges or user interaction via a network vector. Affected software is Android 11 (Bluetooth AVRCP); the underlying issu...

CVE-2020-0286: Incomplete Cleanup

In Bluetooth AVRCP, there is a possible leak of audio metadata due to residual data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150214479...

CVE-2019-2049

In SendMediaUpdate and SendFolderUpdate of avrcpservice.cc, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation...

Google Android Remote Code Execution Vulnerability (CNVD-2019-01597)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A remote code execution vulnerability exists in avrcctrlparsvendorrsp of bluetooth avrcpctrl in Android, which stems from a lack of boundary detection in the program. A remote...

CVE-2017-13283

In avrcctrlparsvendorrsp of bluetooth avrcpctrl, there is a possible out of bounds write on the stack due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions...