Unscored CVE-2023-40087 EUVD-2023-44694GHSA-m4v7-37xm-pp39

In transcodeQ*ToFloat of btif_avrcp_audio_track.cc, there is a possible out of bounds write due to a missing bounds check. This could lead …

Published Dec 4, 2023 · Updated Aug 28, 2024 · Assigned by google_android

Vendor: Google Product: Android Platform: Android

Description

In transcodeQ*ToFloat of btif_avrcp_audio_track.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to paired device escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

Vendor	Product	Affected	Fixed
Google	Android	14, 13, 12L, 12, 11	—

Advisories 2

WID-SEC-2023-3057 Google Android: Mehrere Schwachstellen BSI CERT-Bund (WID) · Dec 6, 2023
WID-SEC-2023-3056 Samsung Android: Mehrere Schwachstellen BSI CERT-Bund (WID) · Dec 4, 2023

References

https://android.googlesource.com/platform/packages/modules/Bluetooth/+/243fdf1c0d53bda9e829b4bec9f7c2a824b4d3d1
https://source.android.com/security/bulletin/2023-12-01