High · 8.8 CVE-2023-40088 EUVD-2023-44695GHSA-6hr2-x3v6-jp3r

In callback_thread_event of com_android_bluetooth_btservice_AdapterService.cpp, there is a possible memory corruption due to a use after fr…

Published Dec 4, 2023 · Updated Aug 2, 2024 · Assigned by google_android

Vendor: Google Product: Android Platform: Android

Description

In callback_thread_event of com_android_bluetooth_btservice_AdapterService.cpp, there is a possible memory corruption due to a use after free. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

Vendor	Product	Affected	Fixed
Google	Android	14, 13, 12L, 12, 11	—

Advisories 2

WID-SEC-2023-3057 Google Android: Mehrere Schwachstellen BSI CERT-Bund (WID) · Dec 6, 2023
WID-SEC-2023-3056 Samsung Android: Mehrere Schwachstellen BSI CERT-Bund (WID) · Dec 4, 2023

References

https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5bfd817719fcf55cbb3476e6b5539a3db4c437fc
https://source.android.com/security/bulletin/2023-12-01

EUVD	v3.1	8.8
CISA-ADP	v3.1	8.8