CVE-2023-35684

Summary

CVE-2023-35684 is a newly identified cybersecurity vulnerability affecting the avdt_msg.cc file in avdt_msg_asmbl. This issue stems from an integer overflow, which may result in a possible out-of-bounds write event. The consequences of this vulnerability can lead to a privilege escalation between paired devices, allowing an attacker to elevate their access without requiring any additional execution privileges. Fortunately, user interaction is not necessary for an attacker to exploit this flaw.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.