PT-2023-17766 · Google · Android

CVE-2023-20979

·

Publicado

2023-03-24

·

Atualizado

2025-02-25

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Android versions Android-13
Description The issue is related to a possible out of bounds read in the GetNextSourceDataPacket function of bta av co.cc due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Recommendations For Android version Android-13, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

CVE-2023-20979

Produtos afetados

Android