CVE-2023-21130: Buffer Overflow
In btmbleperiodicadvsynclost of btmblegap.cc, there is a possible remote code execution due to a buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/platform/packages/modules/Bluetoothto a version that resolves this vulnerability.Fixed in 13-next:2023-06-01 - Upgrade
Upgrade
android/platform/packages/modules/Bluetoothto a version that resolves this vulnerability.Fixed in 13:2023-06-01
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2023-21130.
What is the severity of CVE-2023-21130?
The severity of CVE-2023-21130 is critical with a severity value of 9.8.
What is the description of CVE-2023-21130?
CVE-2023-21130 is a vulnerability in btm_ble_periodic_adv_sync_lost of btm_ble_gap.cc that allows remote code execution due to a buffer overflow.
How does CVE-2023-21130 impact Android?
CVE-2023-21130 can lead to remote code execution on Android devices running version 13.0.
What is the fix for CVE-2023-21130?
A fix for CVE-2023-21130 is available in the latest security bulletin from Google. It is recommended to update your Android device to the latest version.