CVE-2023-40088

In callbackthreadevent of comandroidbluetoothbtserviceAdapterService.cpp, there is a possible memory corruption due to a use after free. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

Vulnerabilities fixed in Google Android and Samsung Mobile

Google has fixed vulnerabilities in Android. A malicious person can exploit the vulnerabilities to launch attacks that can lead to the following categories of damage: Denial-of-Service DoS. Remote code execution Administrator/Root rights Remote code execution User rights Access to sensitive data...

CVE-2023-40088

CVE-2023-40088 is a memory corruption via a use-after-free in Android’s Bluetooth stack (callback_thread_event in com_android_bluetooth_btservice_AdapterService.cpp). The issue could allow remote code execution with no privileges and no user interaction, limited to proximal/nearby Bluetooth range...