CVE-2023-28588: Integer Overflow or Wraparound in Bluetooth Host
Transient DOS in Bluetooth Host while rfc slot allocation.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/platform/vendor/qcom-opensource/system/btto a version that resolves this vulnerability.Fixed in SoCVersion:2023-12-05
Event History
Frequently Asked Questions
What is CVE-2023-28588?
CVE-2023-28588 is an Integer Overflow or Wraparound vulnerability in the Bluetooth Host component of Google Android.
How severe is CVE-2023-28588?
CVE-2023-28588 has a severity level of high (7) based on the Common Vulnerability Scoring System (CVSS) evaluation.
What is the impact of CVE-2023-28588?
CVE-2023-28588 could lead to a transient denial of service (DoS) in the Bluetooth Host component of Google Android due to an issue with rfc slot allocation.
Which software is affected by CVE-2023-28588?
CVE-2023-28588 affects Google Android.
How can I fix CVE-2023-28588?
To fix CVE-2023-28588, it is recommended to apply the necessary security updates provided by Google for Google Android.