Out-of-bounds

In btmbleclearresolvinglistcompletecomplete of btmbleprivacy.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2023-20974

CVE-2023-20974 affects Android 13. The issue is in the function btm_ble_add_resolving_list_entry_complete in btm_ble_privacy.cc , where a missing bounds check can cause an out-of-bounds read. This may lead to local information disclosure and could enable system-level execution privileges, with no...

CVE-2023-20986

CVE-2023-20986 is a vulnerability in Android 13 tied to the function btm_ble_clear_resolving_list_completecomplete in btm_ble_privacy.cc. The issue is an out-of-bounds read caused by a missing bounds check, leading to local information disclosure and requiring system privileges for impact. The de...