PT-2023-4375

CVE-2023-35387

Published

2023-08-08

Updated

2024-05-29

Description by

CVSS 3.1

8.8

High

MetricsAV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows Bluetooth A2DP driver (affected versions not specified)

Description The issue is related to insufficient access restrictions in the Windows Bluetooth A2DP driver, allowing a remote attacker to exploit the vulnerability and elevate their privileges. This can affect the system, potentially leading to unauthorized access or control.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Impacts

Researchers

Lucas Leong

Wmliang

Vendors

Affected products

Weakness enumeration

CWE-191: Integer Underflow (Wrap or Wraparound)

CWE-264

Related identifiers

CVE-2023-35387