Skip to content
OpenAdvisories
High · 8.8 CVE-2024-43770 EUVD-2024-40294GHSA-fq6x-64vf-73q4

In gatts_process_find_info of gatt_sr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote …

Published Jan 21, 2025 · Updated Mar 18, 2025 · Assigned by google_android

Vendor: Google Product: Android Platform: Android

Description

In gatts_process_find_info of gatt_sr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android 15, 14, 13, 12L, 12 —

Advisories 4

References