{"id":"ASB-A-279169188","details":"In multiple locations, there is a possible out of bounds read due to a missing bounds check. This could lead to paired device information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-279169188","CVE-2024-0016"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2024-01-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2024-01-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/1d7ba7c8a205522f384e8d5c7c9f26a421cab5f1"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/1d7ba7c8a205522f384e8d5c7c9f26a421cab5f1"}],"affected":[{"package":{"name":"platform/packages/modules/Bluetooth","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2024-01-01"}]}],"versions":["13"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5d1a3febede9f835797cf5feff978a9f007f2593"],"severity":"High","spl":"2024-01-01","types":["ID"],"vanir_signatures":[{"target":{"function":"btm_ble_biginfo_adv_report_rcvd","file":"system/stack/btm/btm_ble_gap.cc"},"deprecated":false,"digest":{"length":867,"function_hash":"128506338464211136353347199691754861785"},"id":"ASB-A-279169188-13bc7df0","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5d1a3febede9f835797cf5feff978a9f007f2593"},{"digest":{"line_hashes":["46132888042511469739655646515099520739","320747860880414266270363816930147399369","167730089316668387439898123685858342254"],"threshold":0.9},"id":"ASB-A-279169188-44684a95","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5d1a3febede9f835797cf5feff978a9f007f2593","target":{"file":"system/stack/btu/btu_hcif.cc"},"deprecated":false},{"digest":{"threshold":0.9,"line_hashes":["134176529095730349207310322813414809093","333653414213001241285352298693197353698","6790597966270496685238791456261475488","219427427233140710721721724944326381852","324159726413972243306035791146288631449","172668598209820839292107149924208243238","291280789814846344266336872831396594876","270125498322864757400336788230944261750","217352172162531495485310719619969364863","4740923720976772197428640022673839077","123706081303180050898956974792315500271","286046341344677520628379649000813295001","298652125292077224050258107538399731106","182288471750767283892874330001356475778","52377523633978082782638008854549003786","240498576581634174068387060191530908766","69602872805557586521414776272916866376","152924500404004342836161966039145775814","16560170904960842278318671875192920873","276015137060835183347102473647327769337","198617130720659227801480830127194311008","334101034243948504736420845355065705642","103826771164845229301043733114578802677","163803436212227197331793931721821424134","120275273767679000532701551584015168171","195510683357137046012344110057079154991","7445110458515310317055273516267839957","114218103536399797277910342817318467369","121817578701156410112656592853532107019","257847982251532392658512686896503101419","79619574346326762173062944241119669991","323057440314685700808524395085662578786","280671234847701816382105134289969815358","233339197630288317443933483922715264484","249993370757335540965130579674804497256","298582259393325992580389233530195699831"]},"id":"ASB-A-279169188-94d2964f","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5d1a3febede9f835797cf5feff978a9f007f2593","target":{"file":"system/stack/btm/btm_ble_gap.cc"},"deprecated":false},{"source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5d1a3febede9f835797cf5feff978a9f007f2593","target":{"function":"btm_ble_process_ext_adv_pkt","file":"system/stack/btm/btm_ble_gap.cc"},"deprecated":false,"digest":{"length":1191,"function_hash":"142650711863746629456956662126661956487"},"id":"ASB-A-279169188-97864e77","signature_type":"Function","signature_version":"v1"},{"digest":{"length":1699,"function_hash":"36986970045356888828954573857291701271"},"id":"ASB-A-279169188-bc040ffa","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5d1a3febede9f835797cf5feff978a9f007f2593","target":{"file":"system/stack/btm/btm_ble_gap.cc","function":"btm_ble_process_adv_pkt"},"deprecated":false},{"deprecated":false,"digest":{"length":344,"function_hash":"116261578754495139109544483611053863058"},"id":"ASB-A-279169188-d0a6ae5f","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5d1a3febede9f835797cf5feff978a9f007f2593","target":{"function":"btu_ble_data_length_change_evt","file":"system/stack/btu/btu_hcif.cc"}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-279169188.json"}},{"package":{"name":"platform/packages/modules/Bluetooth","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2024-01-01"}]}],"versions":["14"],"ecosystem_specific":{"severity":"High","spl":"2024-01-01","types":["ID"],"vanir_signatures":[{"id":"ASB-A-279169188-2ebbcfb5","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5d1a3febede9f835797cf5feff978a9f007f2593","target":{"file":"system/stack/btm/btm_ble_gap.cc","function":"btm_ble_biginfo_adv_report_rcvd"},"deprecated":false,"digest":{"length":867,"function_hash":"128506338464211136353347199691754861785"}},{"digest":{"length":344,"function_hash":"116261578754495139109544483611053863058"},"id":"ASB-A-279169188-3ae475c1","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5d1a3febede9f835797cf5feff978a9f007f2593","target":{"function":"btu_ble_data_length_change_evt","file":"system/stack/btu/btu_hcif.cc"},"deprecated":false},{"target":{"file":"system/stack/btm/btm_ble_gap.cc"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["134176529095730349207310322813414809093","333653414213001241285352298693197353698","6790597966270496685238791456261475488","219427427233140710721721724944326381852","324159726413972243306035791146288631449","172668598209820839292107149924208243238","291280789814846344266336872831396594876","270125498322864757400336788230944261750","217352172162531495485310719619969364863","4740923720976772197428640022673839077","123706081303180050898956974792315500271","286046341344677520628379649000813295001","298652125292077224050258107538399731106","182288471750767283892874330001356475778","52377523633978082782638008854549003786","240498576581634174068387060191530908766","69602872805557586521414776272916866376","152924500404004342836161966039145775814","16560170904960842278318671875192920873","276015137060835183347102473647327769337","198617130720659227801480830127194311008","334101034243948504736420845355065705642","103826771164845229301043733114578802677","163803436212227197331793931721821424134","120275273767679000532701551584015168171","195510683357137046012344110057079154991","7445110458515310317055273516267839957","114218103536399797277910342817318467369","121817578701156410112656592853532107019","257847982251532392658512686896503101419","79619574346326762173062944241119669991","323057440314685700808524395085662578786","280671234847701816382105134289969815358","233339197630288317443933483922715264484","249993370757335540965130579674804497256","298582259393325992580389233530195699831"]},"id":"ASB-A-279169188-5189cbae","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5d1a3febede9f835797cf5feff978a9f007f2593"},{"id":"ASB-A-279169188-582510a7","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5d1a3febede9f835797cf5feff978a9f007f2593","target":{"file":"system/stack/btu/btu_hcif.cc"},"deprecated":false,"digest":{"line_hashes":["46132888042511469739655646515099520739","320747860880414266270363816930147399369","167730089316668387439898123685858342254"],"threshold":0.9}},{"digest":{"length":1191,"function_hash":"142650711863746629456956662126661956487"},"id":"ASB-A-279169188-776344a0","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5d1a3febede9f835797cf5feff978a9f007f2593","target":{"function":"btm_ble_process_ext_adv_pkt","file":"system/stack/btm/btm_ble_gap.cc"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5d1a3febede9f835797cf5feff978a9f007f2593","target":{"file":"system/stack/btm/btm_ble_gap.cc","function":"btm_ble_process_adv_pkt"},"deprecated":false,"digest":{"function_hash":"36986970045356888828954573857291701271","length":1699},"id":"ASB-A-279169188-be5e0214"}],"fixes":["https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5d1a3febede9f835797cf5feff978a9f007f2593"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-279169188.json"}}],"schema_version":"1.9.0"}