{"id":"ASB-A-245916076","details":"In register_notification_rsp of btif_rc.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-245916076","CVE-2023-21080"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2023-04-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2023-04-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/431e8d05cb961635657f490af2b2051a35520d54"}],"affected":[{"package":{"name":"platform/packages/modules/Bluetooth","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13-next:0"},{"fixed":"13-next:2023-04-01"}]}],"versions":["13-next"],"ecosystem_specific":{"spl":"2023-04-01","types":["ID"],"vanir_signatures":[{"digest":{"function_hash":"333474244974845735124076347977841360913","length":2481},"id":"ASB-A-245916076-2d5f668e","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/daa3efc5e53c8613f4b1a33e095ff6c6460b8d02","target":{"file":"system/btif/src/btif_rc.cc","function":"register_notification_rsp"},"deprecated":false},{"digest":{"line_hashes":["41505634453838932711310759207758210033","36457990891724466920911047625859037663","75827524418212291543698253757485864423"],"threshold":0.9},"id":"ASB-A-245916076-ee6bc6ef","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/daa3efc5e53c8613f4b1a33e095ff6c6460b8d02","target":{"file":"system/btif/src/btif_rc.cc"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/packages/modules/Bluetooth/+/daa3efc5e53c8613f4b1a33e095ff6c6460b8d02"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-245916076.json"}},{"package":{"name":"platform/packages/modules/Bluetooth","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2023-04-01"}]}],"versions":["13"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/modules/Bluetooth/+/daa3efc5e53c8613f4b1a33e095ff6c6460b8d02"],"severity":"High","spl":"2023-04-01","types":["ID"],"vanir_signatures":[{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/daa3efc5e53c8613f4b1a33e095ff6c6460b8d02","target":{"file":"system/btif/src/btif_rc.cc"},"deprecated":false,"digest":{"line_hashes":["41505634453838932711310759207758210033","36457990891724466920911047625859037663","75827524418212291543698253757485864423"],"threshold":0.9},"id":"ASB-A-245916076-294da57a"},{"id":"ASB-A-245916076-ab9eeb59","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/daa3efc5e53c8613f4b1a33e095ff6c6460b8d02","target":{"file":"system/btif/src/btif_rc.cc","function":"register_notification_rsp"},"deprecated":false,"digest":{"length":2481,"function_hash":"333474244974845735124076347977841360913"}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-245916076.json"}}],"schema_version":"1.9.0"}