Information disclosure

Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming...

CVE-2022-40503 Buffer over-read in Bluetooth Host.

Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming...

CVE-2022-40503

CVE-2022-40503 is a buffer over-read vulnerability in the Bluetooth Host during A2DP streaming, described as information disclosure. It affects Qualcomm components (Bluetooth) and is referenced in Qualcomm security bulletins; public details appear in NVD and Red Hat/CVE cross references. Remediat...

CVE-2022-40503 Buffer over-read in Bluetooth Host.

Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming...

CVE-2022-40503: Buffer Over-read

Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming...

PT-2023-13795 · Unknown · Bluetooth Host

Name of the Vulnerable Software and Affected Versions: Bluetooth Host affected versions not specified Description: The issue is related to information disclosure due to a buffer over-read in the Bluetooth Host while A2DP streaming. Recommendations: At the moment, there is no information about a...

CVE-2023-20952

In A2DPBuildCodecHeaderSbc of a2dpsbc.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11...

Out-of-bounds

In A2DPBuildCodecHeaderSbc of a2dpsbc.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11...

CVE-2023-20952

In A2DPBuildCodecHeaderSbc of a2dpsbc.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11...

CVE-2023-20952

The CVE-2023-20952 issue is in the A2DP_BuildCodecHeaderSbc function of a2dp_sbc.cc, where a missing bounds check allows an out-of-bounds write. This can cause local information disclosure without requiring exploits or user interaction. Affected products/versions are Android 11, 12, 12L, and 13; ...

ASB-A-186803518

In A2DPBuildCodecHeaderSbc of a2dpsbc.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2022-33268

Information disclosure due to buffer over-read in Bluetooth HOST while pairing and connecting A2DP. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

Information disclosure

Information disclosure due to buffer over-read in Bluetooth HOST while pairing and connecting A2DP. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2022-33268

Information disclosure due to buffer over-read in Bluetooth HOST while pairing and connecting A2DP. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2022-33268

CVE-2022-33268 records information disclosure from a buffer over-read in the Bluetooth HOST during pairing and A2DP connection on Qualcomm Snapdragon devices (Auto, Compute, IoT, Industrial IoT, Mobile, Wearables, etc.). Public sources in the connected set confirm Qualcomm lists this CVE under Bl...

CVE-2022-33268

Information disclosure due to buffer over-read in Bluetooth HOST while pairing and connecting A2DP. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2022-33268: Out-of-bounds Read

Information disclosure due to buffer over-read in Bluetooth HOST while pairing and connecting A2DP. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

PT-2022-37113

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-use-after-free READ 4 crash has been reported. The crash involves several functions, including cras iodev list disable dev, cras iodev list rm outpu...

cras:cras_fl_media_fuzzer: Heap-use-after-free in cras_iodev_list_disable_dev

Detailed Report: https://oss-fuzz.com/testcase?key=4862980667342848 Project: cras Fuzzing Engine: afl Fuzz Target: crasflmediafuzzer Job Type: aflasancras Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x612000000648 Crash State: crasiodevlistdisabledev...

The vulnerability of the Bluetooth protocol stack for the Linux operating system BlueZ, related to insufficient validation of input data, allows a hacker to execute arbitrary code.

The vulnerability of the Bluetooth protocol stack for the Linux operating system BlueZ is related to insufficient validation of user-input data during the processing of the A2DP profile. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using specially crafted data...