Skip to content
OpenAdvisories
Unscored CVE-2021-39805 EUVD-2021-26162GHSA-4c23-j7cr-737q

In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote in…

Published Apr 12, 2022 · Updated Aug 4, 2024 · Assigned by google_android

Description

In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure through Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12LAndroid ID: A-212694559

Affected products

VendorProductAffectedFixed
— Android Android-12 Android-12L —

References