Lucene search
GoogleOSV:ASB-A-277590580HistoryDec 01, 2023 - 12:00 a.m.
Potential oob read due to missing length check in BleAdvertiserInterfaceImpl::StartAdvertisingSet() of bluetooth stack
2023-12-0100:00:00
Google
osv.dev
12
bleadvertiserinterfaceimpl
startadvertisingset
parse_gap_data
missing length check
local information disclosure
user execution privileges
user interaction not needed
software
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
AI Score
6.2
Confidence
High
EPSS
0
Percentile
5.1%
In parse_gap_data of utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.
Related
prion
prion
Out-of-bounds
2023-12-04 23:15:00
cve
cve
CVE-2023-40083
2023-12-04 23:15:24
cvelist
cvelist
CVE-2023-40083
2023-12-04 22:40:52
cnvd
cnvd
Google Android Information Disclosure Vulnerability (CNVD-2024-07122)
2023-12-06 00:00:00
nvd
nvd
CVE-2023-40083
2023-12-04 23:15:24
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
AI Score
6.2
Confidence
High
EPSS
0
Percentile
5.1%
Related for OSV:ASB-A-277590580