system_bt_AOSP10_r33_CVE-2021-0476

Fluoride 蓝牙协议栈 在 AOSP 上构建和运行 直接构建 AOSP 即可 - Fluoride 默认包含在内。 在 Linux 上构建和运行 适用于 Ubuntu 的说明，已在 14.04 + Clang 3.5.0 和 16.10 + Clang 3.8.0 上测试 下载源代码 root@kitploit: mkdir /fluoride cd /fluoride git clone https://android.googlesource.com/platform/system/bt 安装依赖项（需要 sudo 权限）： root@kitploit: cd...

CVE-2021-0476

In FindOrCreatePeer of btifav.cc, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-9...

CVE-2021-0476

In FindOrCreatePeer of btifav.cc, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-9...

CVE-2021-0476

CVE-2021-0476 describes a local elevation-of-privilege vulnerability due to a race condition causing a use-after-free in FindOrCreatePeer (btif_av.cc). Affected: Android 11, 10, 9. Exploitation requires local access with no user interaction; impact is escalation to a privileged context with high ...