{"id":"ASB-A-245916076","details":"In register_notification_rsp of btif_rc.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-245916076","CVE-2023-21080"],"modified":"2026-05-28T15:16:54.500952700Z","published":"2023-04-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2023-04-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/431e8d05cb961635657f490af2b2051a35520d54"}],"affected":[{"package":{"name":"platform/packages/modules/Bluetooth","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13-next:0"},{"fixed":"13-next:2023-04-01"}]}],"versions":["13-next"],"ecosystem_specific":{"vanir_signatures":[{"digest":{"length":2481,"function_hash":"333474244974845735124076347977841360913"},"source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/daa3efc5e53c8613f4b1a33e095ff6c6460b8d02","deprecated":false,"target":{"file":"system/btif/src/btif_rc.cc","function":"register_notification_rsp"},"signature_version":"v1","id":"ASB-A-245916076-2d5f668e","signature_type":"Function"},{"source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/daa3efc5e53c8613f4b1a33e095ff6c6460b8d02","signature_version":"v1","deprecated":false,"target":{"file":"system/btif/src/btif_rc.cc"},"digest":{"threshold":0.9,"line_hashes":["41505634453838932711310759207758210033","36457990891724466920911047625859037663","75827524418212291543698253757485864423"]},"id":"ASB-A-245916076-ee6bc6ef","signature_type":"Line"}],"severity":"High","types":["ID"],"fixes":["https://android.googlesource.com/platform/packages/modules/Bluetooth/+/daa3efc5e53c8613f4b1a33e095ff6c6460b8d02"],"spl":"2023-04-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-245916076.json"}},{"package":{"name":"platform/packages/modules/Bluetooth","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2023-04-01"}]}],"versions":["13"],"ecosystem_specific":{"vanir_signatures":[{"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["41505634453838932711310759207758210033","36457990891724466920911047625859037663","75827524418212291543698253757485864423"]},"deprecated":false,"target":{"file":"system/btif/src/btif_rc.cc"},"signature_version":"v1","id":"ASB-A-245916076-294da57a","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/daa3efc5e53c8613f4b1a33e095ff6c6460b8d02"},{"source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/daa3efc5e53c8613f4b1a33e095ff6c6460b8d02","signature_version":"v1","deprecated":false,"target":{"file":"system/btif/src/btif_rc.cc","function":"register_notification_rsp"},"digest":{"length":2481,"function_hash":"333474244974845735124076347977841360913"},"id":"ASB-A-245916076-ab9eeb59","signature_type":"Function"}],"severity":"High","types":["ID"],"fixes":["https://android.googlesource.com/platform/packages/modules/Bluetooth/+/daa3efc5e53c8613f4b1a33e095ff6c6460b8d02"],"spl":"2023-04-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-245916076.json"}}],"schema_version":"1.7.5"}