Skip to content
OpenAdvisories
High · 8.8 CVE-2024-43771 EUVD-2024-40295GHSA-v4mm-j7r5-wxq4

In gatts_process_read_req of gatt_sr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (…

Published Jan 21, 2025 · Updated Mar 18, 2025 · Assigned by google_android

Vendor: Google Product: Android Platform: Android

Description

In gatts_process_read_req of gatt_sr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android 15, 14, 13, 12L, 12 —

Advisories 4

References