CVE-2023-21130: Buffer Overflow

Published Jun 5, 2023

Updated

In btmbleperiodicadvsynclost of btmblegap.cc, there is a possible remote code execution due to a buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-273502002

Affected Software

2 affected components

Google Android=13.0

Google Android

Remediation

Patch Available

https://source.android.com/security/bulletin/2023-06-01

Event History

Jun 5, 2023

CVE Published

via Android·12:00 AM

Jun 15, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the vulnerability ID for this vulnerability?

The vulnerability ID for this vulnerability is CVE-2023-21130.

What is the severity of CVE-2023-21130?

The severity of CVE-2023-21130 is critical with a severity value of 9.8.

What is the description of CVE-2023-21130?

CVE-2023-21130 is a vulnerability in btm_ble_periodic_adv_sync_lost of btm_ble_gap.cc that allows remote code execution due to a buffer overflow.

How does CVE-2023-21130 impact Android?

CVE-2023-21130 can lead to remote code execution on Android devices running version 13.0.

What is the fix for CVE-2023-21130?

A fix for CVE-2023-21130 is available in the latest security bulletin from Google. It is recommended to update your Android device to the latest version.