CVE-2023-20983

In btmblerandenccomplete of btmble.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID:...

CVE-2023-20983

CVE-2023-20983 affects Android (Android-13) in the Bluetooth stack: in btm_ble_rand_enc_complete (btm_ble.cc) there is an out-of-bounds read due to a missing bounds check, enabling local information disclosure with system privileges. Exploitation is reported as local (AV:L, AC:L, PR:H, UI:N) with...