CVE-2023-21199

CVE-2023-21199 affects Android 13; the issue is in btu_ble_proc_ltk_req of btu_hcif.cc where a missing bounds check allows an out-of-bounds read. This can lead to local information disclosure with System privileges required. Attack vector is LOCAL with LOW complexity and no user interaction; conf...