ASB-A-273874525

In buildreadmultirsp of gattsr.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-35658

In gattprocessprepwritersp of gattcl.cc, there is a possible privilege escalation due to a use after free. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

Google Android 资源管理错误漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a code execution vulnerability that is caused by use after release in gattprocessprepwritersp in gattcl.cc. An attacker can exploit this vulnerability to execute arbitrary code on the system...

PT-2023-25246 · Bluetooth · Bluetooth

Name of the Vulnerable Software and Affected Versions: Bluetooth affected versions not specified Description: The issue is related to a possible privilege escalation due to a use after free in the gatt process prep write rsp function of gatt cl.cc. This could lead to remote code execution with no...

PT-2023-25259 · Bluetooth · Bluetooth

Name of the Vulnerable Software and Affected Versions: Bluetooth affected versions not specified Description: The issue is related to a possible out of bounds write due to an integer overflow in the build read multi rsp function of gatt sr.cc. This could lead to remote code execution with no...

ASB-A-271335899

In eattl2capreconfigcompleted of eattimpl.h, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-273966636

In buildreadmultirsp of gattsr.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-274617156

In gattprocessprepwritersp of gattcl.cc, there is a possible privilege escalation due to a use after free. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-21647

Information disclosure in Bluetooth when an GATT packet is received due to improper input validation...

Input validation

Information disclosure in Bluetooth when an GATT packet is received due to improper input validation...

CVE-2023-21647 Improper Input Validation in Bluetooth HOST

Information disclosure in Bluetooth when an GATT packet is received due to improper input validation...

CVE-2023-21647

CVE-2023-21647 involves information disclosure in Bluetooth when a GATT packet is received due to improper input validation. The issue is described across multiple sources as a Bluetooth HOST vulnerability (Qualcomm closed-source component) with CVSS v3.1 base score 6.5 (Network, Low complexity, ...

PT-2023-18310 · Bluetooth · Bluetooth

Name of the Vulnerable Software and Affected Versions: Bluetooth affected versions not specified Description: The issue is related to information disclosure in Bluetooth when a GATT packet is received. This occurs due to improper input validation. Recommendations: At the moment, there is no...

CVE-2023-21250

In gattendoperation of gattutils.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

Google Android OS 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google, Inc. in the United States. A security vulnerability exists in Google Android OS, which stems from a lack of bounds checking and possible out-of-bounds writes in gattendoperation in gattutils.cc...

CVE-2023-21194

In gattdbgopname of gattutils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the Bluetooth server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2023-21194

In gattdbgopname of gattutils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the Bluetooth server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

Google Pixel 缓冲区错误漏洞

Google Pixel is a smartphone from Google, an American company. Google Pixel suffers from a security vulnerability that originates in gattdbgopname in gattutils.cc, where an out-of-bounds read is possible due to a lack of bounds checking, which could lead to the disclosure of local information in...

CVE-2023-21194

In gattdbgopname of gattutils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the Bluetooth server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

gatt-ce.at Cross Site Scripting vulnerability OBB-3298386

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...