platform/system/bt vulnerabilities (Android)
72 vulnerabilities.
platform/system/btAndroidIn handle_rc_metamsg_cmd of btif_rc.cc, there is a possible out of bounds write due to a missing...8.8 Highplatform/system/btAndroidIn avrc_pars_browse_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to a...6.5 Mediumplatform/system/btAndroidBluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B through 5.2 may...5.4 Mediumplatform/system/btAndroidBluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit...4.2 Mediumplatform/system/btAndroidIn FindOrCreatePeer of btif_av.cc, there is a possible use after free due to a race condition....7.0 Highplatform/system/btAndroidIn on_l2cap_data_ind of btif_sock_l2cap.cc, there is possible memory corruption due to a use...8.8 Highplatform/system/btAndroidIn avrc_msg_cback of avrc_api.cc, there is a possible out of bounds write due to a heap buffer...9.8 Criticalplatform/system/btAndroidIn avrc_proc_vendor_command of avrc_api.cc, there is a possible leak of heap data due to...7.5 Highplatform/system/btAndroidIn avrc_msg_cback of avrc_api.cc, there is a possible out of bounds read due to a missing bounds...7.5 Highplatform/system/btAndroidIn sdp_copy_raw_data of sdp_discovery.cc, there is a possible system compromise due to a double...9.8 Criticalplatform/system/btAndroidIn avrc_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible out of bounds write due to a...9.8 Criticalplatform/system/btAndroidIn reassemble_and_dispatch of packet_fragmenter.cc, there is a possible way to inject packets...9.8 Criticalplatform/system/btAndroidMemory corruption while calculating L2CAP packet length in reassembly logic when remote sends...9.8 Criticalplatform/system/btAndroidIn sdp_server_handle_client_req of sdp_server.cc, there is a possible out of bounds read due to a...7.5 Highplatform/system/btAndroidIn btm_sec_disconnected of btm_sec.cc, there is a possible memory corruption due to a use after...8.8 Highplatform/system/btAndroidIn gatt_process_read_by_type_rsp of gatt_cl.cc, there is a possible out of bounds read due to a...7.5 Highplatform/system/btAndroidIn gatt_process_read_by_type_rsp of gatt_cl.cc, there is a possible out of bounds read due to a...7.5 Highplatform/system/btAndroidDevices supporting Bluetooth before 5.1 may allow man-in-the-middle attacks. Cross Transport Key...5.9 Mediumplatform/system/btAndroidIn allocExcessBits of bitalloc.c, there is a possible out of bounds write due to an incorrect...9.8 Criticalplatform/system/btAndroidIn the Bluetooth service, there is a possible spoofing attack due to a logic error. This could...5.7 Mediumplatform/system/btAndroidIn a2dp_vendor_ldac_decoder_decode_packet of a2dp_vendor_ldac_decoder.cc, there is a possible out...9.8 Criticalplatform/system/btAndroidOpenTrace, as used in COVIDSafe through v1.0.17, TraceTogether, ABTraceTogether, and other...9.8 Critical