CVE-2020-0138 - In get_element_attr_rsp of btif_rc.cc, there is a possible out of bounds write due to a missing boun

CVE-2020-0138

Summary

In get_element_attr_rsp of btif_rc.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution if bluetoothtbd were used, which it isn't in typical Android platforms, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-142878416

References

https://source.android.com/security/bulletin/pixel/2020-06-01

Vulnerable Configurations

cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*

CVSS

Base:	6.8 (as of 15-06-2020 - 12:56)
Impact:
Exploitability:

CWE

CWE-787

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:M/Au:N/C:P/I:P/A:P

refmap via4

misc

https://source.android.com/security/bulletin/pixel/2020-06-01

Last major update

15-06-2020 - 12:56

Published

11-06-2020 - 15:15

Last modified

15-06-2020 - 12:56