CVE-2023-21194

Summary

CVE-2023-21194 is a vulnerability affecting the Bluetooth server in Android-13. In the gatt_dbg_op_name function of gatt_utils.cc, there is a missing bounds check that could result in an out-of-bounds read. This issue could lead to local information disclosure, and system execution privileges are required for exploitation. Unlike some vulnerabilities, user interaction is not necessary for an attacker to leverage this flaw.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.