CVE-2023-35666

In btaavrcmsg of btaavact.cc, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-35666

This CVE (CVE-2023-35666) affects the Android Bluetooth stack: specifically in the bta_av_rc_msg handling within bta_av_act.cc. The vulnerability is a use-after-free caused by a logic error, leading to local elevation of privilege without requiring user interaction. The exploitation is categorize...