Skip to content
OpenAdvisories
Medium · 4.0 CVE-2023-35657 EUVD-2023-39657GHSA-m3pw-86cq-qfvq

In bta_av_config_ind of bta_av_aact.cc, there is a possible out of bounds read due to type confusion. This could lead to local information …

Published Sep 4, 2025 · Updated Sep 4, 2025 · Assigned by google_android

Vendor: Google Product: Android Platform: Android

Description

In bta_av_config_ind of bta_av_aact.cc, there is a possible out of bounds read due to type confusion. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android 15, 14, 13 —

Advisories 2

References