platform/system/bt vulnerabilities (Android)
72 vulnerabilities.
-
platform/system/btAndroid In multiple locations, there is a possible way that avdtp and avctp channels could be unencrypted... 7.8 High -
platform/system/btAndroid In btif_hh_hsdata_rpt_copy_cb of bta_hh.cc, there is a possible way to corrupt memory due to a... 8.0 High -
platform/system/btAndroid In gatts_process_primary_service_req of gatt_sr.cc, there is a possible out of bounds write due... 9.8 Critical -
platform/system/btAndroid In gatts_process_read_by_type_req of gatt_sr.cc, there is a possible out of bounds write due to a... 9.8 Critical -
platform/system/btAndroid In gatts_process_read_req of gatt_sr.cc, there is a possible out of bounds write due to a missing... 8.8 High -
platform/system/btAndroid In gatts_process_find_info of gatt_sr.cc, there is a possible out of bounds write due to a... 8.8 High -
platform/system/btAndroid In build_read_multi_rsp of gatt_sr.cc, there is a possible denial of service due to a logic error... 6.5 Medium -
platform/system/btAndroid In build_read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to a missing... 8.8 High -
platform/system/btAndroid In multiple locations, there is a possible bypass of user consent to enabling new Bluetooth HIDs... 7.8 High -
platform/system/btAndroid In smp_proc_rand of smp_act.cc, there is a possible authentication bypass during legacy BLE... 8.8 High -
platform/system/btAndroid In build_read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to a heap... 8.8 High -
platform/system/btAndroid In bta_av_rc_msg of bta_av_act.cc, there is a possible use after free due to a logic error in the... 7.8 High -
platform/system/btAndroid In SDP_AddAttribute of sdp_db.cc, there is a possible out of bounds write due to an incorrect... 8.8 High -
platform/system/btAndroid In gatt_end_operation of gatt_utils.cc, there is a possible out of bounds write due to a missing... 9.8 Critical -
platform/system/btAndroid In btm_sec_encrypt_change of btm_sec.cc, there is a possible way to downgrade the link key type... 8.8 High -
platform/system/btAndroid In avdt_scb_hdl_pkt_no_frag of avdt_scb_act.cc, there is a possible out of bounds write due to an... 7.8 High -
platform/system/btAndroid Buffer over-read in Bluetooth Host. 8.2 High -
platform/system/btAndroid In SDP_AddAttribute of sdp_db.cc, there is a possible out of bounds write due to an incorrect... 9.8 Critical -
platform/system/btAndroid In A2DP_BuildCodecHeaderSbc of a2dp_sbc.cc, there is a possible out of bounds write due to a... 5.5 Medium -
platform/system/btAndroid In gatt_process_prep_write_rsp of gatt_cl.cc, there is a possible out of bounds write due to a... 9.8 Critical -
platform/system/btAndroid In avdt_scb_hdl_write_req of avdt_scb_act.cc, there is a possible out of bounds write due to a... 7.8 High -
platform/system/btAndroid Improper Validation of Array Index in Bluetooth HOST 7.3 High -
platform/system/btAndroid Integer Overflow to Buffer Overflow in Bluetooth HOST 9.8 Critical -
platform/system/btAndroid In pinReplyNative of com_android_bluetooth_btservice_AdapterService.cpp, there is a possible out... 7.8 High -
platform/system/btAndroid Information disclosure due to buffer over-read in Bluetooth HOST while pairing and connecting... 8.2 High -
platform/system/btAndroid In several functions that parse avrc response in avrc_pars_ct.cc and related files, there are... 7.5 High -
platform/system/btAndroid In avct_lcb_msg_asmbl of avct_lcb_act.cc, there is a possible out of bounds write due to a... 8.8 High -
platform/system/btAndroid In BNEP_ConnectResp of bnep_api.cc, there is a possible out of bounds read due to an incorrect... 6.5 Medium -
platform/system/btAndroid In avdt_msg_asmbl of avdt_msg.cc, there is a possible out of bounds write due to a missing bounds... 8.8 High -
platform/system/btAndroid In process_service_search_rsp of sdp_discovery.cc, there is a possible out of bounds read due to... 7.5 High -
platform/system/btAndroid In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to an... 7.5 High -
platform/system/btAndroid In btif_dm_auth_cmpl_evt of btif_dm.cc, there is a possible vulnerability in Cross-Transport Key... 9.8 Critical -
platform/system/btAndroid In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds write due to a missing... 8.8 High -
platform/system/btAndroid In bta_hf_client_handle_cind_list_item of bta_hf_client_at.cc, there is a possible out of bounds... 9.8 Critical -
platform/system/btAndroid In AT_SKIP_REST of bta_hf_client_at.cc, there is a possible out of bounds read due to an... 7.5 High -
platform/system/btAndroid In read_attr_value of gatt_db.cc, there is a possible out of bounds write due to a missing bounds... 9.8 Critical -
platform/system/btAndroid In avrc_ctrl_pars_vendor_cmd of avrc_pars_ct.cc, there is a possible out of bounds read due to... 6.5 Medium -
platform/system/btAndroid In read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to an incorrect... 9.8 Critical -
platform/system/btAndroid In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to an... 6.5 Medium -
platform/system/btAndroid In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to a... 7.5 High -
platform/system/btAndroid In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to a missing... 6.5 Medium -
platform/system/btAndroid In gatt_process_notification of gatt_cl.cc, there is a possible out of bounds write due to an... 9.8 Critical -
platform/system/btAndroid In btm_sec_connected and btm_sec_disconnected of btm_sec.cc file , there is a possible use after... 7.8 High -
platform/system/btAndroid In btif_in_hf_client_generic_evt of btif_hf_client.cc, there is a possible Bluetooth service... 7.5 High -
platform/system/btAndroid In btu_hcif_process_event of btu_hcif.cc, there is a possible out of bounds read due to an... 4.4 Medium -
platform/system/btAndroid In osi_malloc and osi_calloc of allocator.cc, there is a possible out of bounds write due to an... 8.8 High -
platform/system/btAndroid In gatt_process_notification of gatt_cl.cc, there is a possible out of bounds write due to a... 8.8 High -
platform/system/btAndroid Improper Access Control when ACL link encryption is failed and ACL link is not disconnected... 6.5 Medium -
platform/system/btAndroid In BTM_TryAllocateSCN of btm_scn.cc, there is a possible out of bounds write due to an incorrect... 7.8 High -
platform/system/btAndroid In ConnectionHandler::SdpCb of connection_handler.cc, there is a possible out of bounds read due... 7.5 High - Show olderLoading…