EUVD-2020-1642

Malware in sbrugna...

Google Android btif_rc.cc Component Buffer Overflow Vulnerability

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a buffer overflow vulnerability that stems from a lack of bounds checking in the registernotificationrsp component of btifrc.cc, which can be exploited by an attacker to cause an out-of-bounds re...

CVE-2023-21080

In registernotificationrsp of btifrc.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11...

Out-of-bounds

In registernotificationrsp of btifrc.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11...

CVE-2023-21080

CVE-2023-21080 affects Android 11–13 and is tied to register_notification_rsp in btif_rc.cc, where a missing bounds check enables a local out-of-bounds read. This can cause information disclosure without requiring privileges or user interaction. The available sources (NVD/NVDC/CNVD/OsV/PRION mirr...

Out-of-bounds

In handlercmetamsgcmd of btifrc.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11...

Out-of-bounds

In getelementattrrsp of btifrc.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution if bluetoothtbd were used, which it isn't in typical Android platforms, with no additional execution privileges needed. User interaction is not needed...