CVE-2019-1996

CVE-2019-1996 affects Android Bluetooth processing. In avrc_pars_browse_rsp (avrc_pars_ct.cc), a missing bounds check can cause an out-of-bounds read, enabling remote information disclosure over Bluetooth with no extra privileges and no user interaction. Affects Android 8.0, 8.1, and 9. The issue...