CVE-2023-20980

In btublellconnparamupdevt of btuhcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the Bluetooth server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions...

CVE-2023-20980

CVE-2023-20980 affects Android 13 Bluetooth stack (btu_ble_ll_conn_param_upd_evt in btu_hcif.cc). The issue is an out-of-bounds read due to a missing bounds check, leading to local information disclosure with System execution privileges required; no user interaction is needed. Public documentatio...