[GWP-ASan] Use after free in bluetooth (sdp)

2021-06-0100:00:00

Google

osv.dev

bluetooth

use after free

information disclosure

remote

exploitation

security

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

37.9%

JSON

In ConnectionHandler::SdpCb of connection_handler.cc, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.