Lucene search

GoogleOSV:ASB-A-233604485

HistoryNov 01, 2022 - 12:00 a.m.

[Android 13 Beta] [Heap Use After Free in PAN_WriteBuf Function in pan_api.cc in libbt-stack]

2022-11-0100:00:00

Google

osv.dev

android

pan_writebuf

libbt-stack

bluetooth

information disclosure

6.5 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.6%

JSON

In PAN_WriteBuf of pan_api.cc, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.

CPENameOperatorVersion
platform/packages/modules/bluetootheq13

CPE	Name	Operator	Version
	platform/packages/modules/bluetooth	eq	13

References

android.googlesource.com/platform/packages/modules/Bluetooth/+/7281ef11c05226ef0591dab4b6b18af958d260fd

source.android.com/security/bulletin/2022-11-01

6.5 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.6%

JSON

Related for OSV:ASB-A-233604485