Lucene search

K
osvGoogleOSV:ASB-A-168802990
HistoryJan 01, 2021 - 12:00 a.m.

[an OOB write vuln of libbluetooth.so ]

2021-01-0100:00:00
Google
osv.dev
16
vulnerability
out of bounds write
libbluetooth
avrc_pars_vendor_cmd
avrc_pars_tg.cc
remote code execution
bluetooth
software
exploitation
no user interaction

EPSS

0.001

Percentile

42.1%

In avrc_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.

EPSS

0.001

Percentile

42.1%