Skip to content
OpenAdvisories
High · 8.8 CVE-2024-43096 EUVD-2024-40351GHSA-cw79-pg42-cfvq

In build_read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (pr…

Published Jan 21, 2025 · Updated Mar 19, 2025 · Assigned by google_android

Vendor: Google Product: Android Platform: Android

Description

In build_read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android 15, 14, 13, 12L, 12 —

Advisories 4

References