CVE-2024-27225: Buffer Overflow
In sendHciCommand of bluetoothhci.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in :2024-03-05
Event History
Frequently Asked Questions
What is the severity of CVE-2024-27225?
CVE-2024-27225 is classified as a high-severity vulnerability due to the potential for local information disclosure.
How do I fix CVE-2024-27225?
To fix CVE-2024-27225, update your Android device to the latest security patch provided by the manufacturer.
What types of devices are affected by CVE-2024-27225?
CVE-2024-27225 affects Android version 13.0 and specifically targets devices running this version.
Can CVE-2024-27225 be exploited without user interaction?
Yes, CVE-2024-27225 can be exploited without user interaction, allowing for possible information disclosure.
What does a heap buffer overflow mean in the context of CVE-2024-27225?
A heap buffer overflow in CVE-2024-27225 refers to a memory management error that can lead to unintended data manipulation or leakage.