CVE-2023-21233

In multiple locations of avrc, there is a possible leak of heap data due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

Google Wear OS Security Vulnerability

Google Wear OS is a Google-developed operating system from Google, Inc. that is specifically designed for use in smartwatches, smart bands, and other wearable devices. Google Wear OS suffers from a security vulnerability that stems from the presence of uninitialized data in multiple locations of...

PT-2023-18019

Name of the Vulnerable Software and Affected Versions avrc affected versions not specified Description In multiple locations of avrc, there is a possible leak of heap data due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed...

CVE-2023-21233: Use of Uninitialized Resource

In multiple locations of avrc, there is a possible leak of heap data due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2022-47974

The Bluetooth AVRCP module has a vulnerability that can lead to DoS attacks.Successful exploitation of this vulnerability may cause the Bluetooth process to restart...

CVE-2022-20483

In several functions that parse avrc response in avrcparsct.cc and related files, there are possible out of bounds reads due to integer overflows. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for...

PT-2022-14700 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-13 Description: The issue is related to several functions that parse avrc responses in avrc pars ct.cc and related files, where possible out of bounds reads can occur due to integer overflows. This...

ASB-A-242459126

In several functions that parse avrc response in avrcparsct.cc and related files, there are possible out of bounds reads due to integer overflows. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2022-14637 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-13 Description: The issue is related to a possible out of bounds read due to an integer overflow in the avrc ctrl pars vendor rsp function of avrc pars ct.cc. This could lead to remote information...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google, Inc. Google Android is vulnerable to an information disclosure vulnerability caused by incorrect input validation in avrc ctrlPARvendorcmd of avrcparsct.cc. An attacker could use this vulnerability to obtain sensitive...

PT-2022-14445

Name of the Vulnerable Software and Affected Versions Android versions Android-10 through Android-12L Description The issue is related to a possible out of bounds read due to improper input validation in the avrc ctrl pars vendor cmd function of avrc pars ct.cc. This could lead to remote...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google, Inc. A buffer overflow vulnerability exists in avrcparsct.cc in avrcctrlparsvendorrsp, due to a lack of boundary checking. an out-of-bounds read may occur. An attacker could exploit this vulnerability to cause a remote...

PT-2022-11082

Name of the Vulnerable Software and Affected Versions Android versions Android-10 through Android-12L Description The issue is related to a possible out of bounds read in the avrc ctrl pars vendor rsp function of avrc pars ct.cc due to a missing bounds check. This could lead to remote information...

CVE-2021-0504

In avrcparsbrowsersp of avrcparsct.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2021-0474

In avrcmsgcback of avrcapi.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9...

PT-2021-13154

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: There is a possible out of bounds read due to a missing bounds check in avrc pars browse rsp of avrc pars ct.cc. This could lead to remote information disclosure over Bluetooth with no additional...

PT-2021-13131

Name of the Vulnerable Software and Affected Versions: Android versions Android-8.1 through Android-11 Description: A heap buffer overflow in the avrc msg cback function of avrc api.cc can lead to a possible out of bounds write, resulting in remote code execution without requiring additional...

CVE-2021-0435

In avrcprocvendorcommand of avrcapi.cc, there is a possible leak of heap data due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8....

CVE-2021-0431

In avrcmsgcback of avrcapi.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure to a paired device with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2021-0435

In avrcprocvendorcommand of avrcapi.cc, there is a possible leak of heap data due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8....