{"id":"ASB-A-356886209","details":"In build_read_multi_rsp of gatt_sr.cc, there is a possible denial of service due to a logic error in the code. This could lead to remote (proximal/adjacent) denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-356886209","CVE-2024-43763"],"modified":"2026-05-01T15:24:27.653932Z","published":"2025-01-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2025-01-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ec76dc86a8e9a7c084abde140356d024c94109d3"}],"affected":[{"package":{"name":"platform/packages/modules/Bluetooth","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15-next:0"},{"fixed":"15-next:2025-01-01"}]}],"versions":["15-next"],"ecosystem_specific":{"severity":"High","types":["DoS"],"fixes":["https://android.googlesource.com/platform/packages/modules/Bluetooth/+/298fdca3f2700432e30c2a1fdfec6f93af453dd8"],"spl":"2025-01-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-356886209.json"}},{"package":{"name":"platform/system/bt","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2025-01-01"}]}],"versions":["12"],"ecosystem_specific":{"severity":"High","types":["DoS"],"fixes":["https://android.googlesource.com/platform/system/bt/+/5ac236a6e8642a5b7d69b0b2677397c02f122f15"],"spl":"2025-01-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-356886209.json"}},{"package":{"name":"platform/system/bt","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2025-01-01"}]}],"versions":["12L"],"ecosystem_specific":{"severity":"High","types":["DoS"],"fixes":["https://android.googlesource.com/platform/system/bt/+/5ac236a6e8642a5b7d69b0b2677397c02f122f15"],"spl":"2025-01-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-356886209.json"}},{"package":{"name":"platform/packages/modules/Bluetooth","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2025-01-01"}]}],"versions":["15"],"ecosystem_specific":{"severity":"High","types":["DoS"],"fixes":["https://android.googlesource.com/platform/packages/modules/Bluetooth/+/298fdca3f2700432e30c2a1fdfec6f93af453dd8"],"spl":"2025-01-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-356886209.json"}},{"package":{"name":"platform/packages/modules/Bluetooth","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2025-01-01"}]}],"versions":["13"],"ecosystem_specific":{"severity":"High","types":["DoS"],"fixes":["https://android.googlesource.com/platform/packages/modules/Bluetooth/+/24508a81f05dc33e2abda46997445d84c4c76df5"],"spl":"2025-01-01","vanir_signatures":[{"signature_type":"Function","target":{"function":"build_read_multi_rsp","file":"system/stack/gatt/gatt_sr.cc"},"deprecated":false,"source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/24508a81f05dc33e2abda46997445d84c4c76df5","id":"ASB-A-356886209-9bfab64c","signature_version":"v1","digest":{"length":2156,"function_hash":"39974884357733382414201187773803691582"}},{"signature_type":"Line","target":{"file":"system/stack/gatt/gatt_sr.cc"},"deprecated":false,"source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/24508a81f05dc33e2abda46997445d84c4c76df5","id":"ASB-A-356886209-c45409bc","signature_version":"v1","digest":{"line_hashes":["256103936039081068814854393900838184127","233910280098665537013382464207360200070","83699234729775685097611726235894016936","106566999101762116401845614754552683359"],"threshold":0.9}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-356886209.json"}},{"package":{"name":"platform/packages/modules/Bluetooth","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2025-01-01"}]}],"versions":["14"],"ecosystem_specific":{"severity":"High","types":["DoS"],"fixes":["https://android.googlesource.com/platform/packages/modules/Bluetooth/+/24508a81f05dc33e2abda46997445d84c4c76df5"],"spl":"2025-01-01","vanir_signatures":[{"signature_type":"Function","target":{"function":"build_read_multi_rsp","file":"system/stack/gatt/gatt_sr.cc"},"deprecated":false,"source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/24508a81f05dc33e2abda46997445d84c4c76df5","id":"ASB-A-356886209-22f7266c","signature_version":"v1","digest":{"length":2156,"function_hash":"39974884357733382414201187773803691582"}},{"signature_type":"Line","target":{"file":"system/stack/gatt/gatt_sr.cc"},"deprecated":false,"source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/24508a81f05dc33e2abda46997445d84c4c76df5","id":"ASB-A-356886209-34113492","signature_version":"v1","digest":{"line_hashes":["256103936039081068814854393900838184127","233910280098665537013382464207360200070","83699234729775685097611726235894016936","106566999101762116401845614754552683359"],"threshold":0.9}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-356886209.json"}}],"schema_version":"1.7.5"}