PT-2023-17990 · Google · Android

CVE-2023-21201

·

Publicado

2023-06-28

·

Atualizado

2023-07-05

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Android versions prior to the fixed version
Description The issue is related to a possible out of bounds read in the on create record event function of btif sdp server.cc due to a missing null check. This could lead to a remote denial of service with no additional execution privileges needed. User interaction is not required for exploitation.
Recommendations For Android versions prior to the fixed version, update to a version that includes the fix for this issue to prevent remote denial of service attacks.

Correção

Out of bounds Read

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2023-21201

Produtos afetados

Android