Skip to content
OpenAdvisories
Medium · 6.5 CVE-2018-9480 EUVD-2018-21074GHSA-3vj4-j93w-77x3

In bta_hd_get_report_act of bta_hd_act.cc, there is a possible out-of-bounds read due to improper input validation. This could lead to remo…

Published Nov 20, 2024 · Updated Nov 20, 2024 · Assigned by google_android

Description

In bta_hd_get_report_act of bta_hd_act.cc, there is a possible out-of-bounds read due to improper input validation. This could lead to remote information disclosure in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android 8, 8.1, 9 —

References