{"id":"PUB-A-167759047","details":"In btu_hcif_process_event of btu_hcif.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-167759047","CVE-2021-1007"],"modified":"2026-05-19T16:54:37.272608834Z","published":"2021-12-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2021-12-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/system/bt/+/3ffe74d086f4bfba370749c55d315d881d77816c"}],"affected":[{"package":{"name":"platform/system/bt","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2021-12-01"}]}],"versions":["12"],"ecosystem_specific":{"types":["ID"],"severity":"Moderate","fixes":["https://android.googlesource.com/platform/system/bt/+/3ffe74d086f4bfba370749c55d315d881d77816c"],"vanir_signatures":[{"signature_version":"v1","signature_type":"Line","target":{"file":"stack/include/hci_evt_length.h"},"id":"PUB-A-167759047-383064b1","source":"https://android.googlesource.com/platform/system/bt/+/3ffe74d086f4bfba370749c55d315d881d77816c","digest":{"line_hashes":["40767343341832141217188341133684849434","54024266049303169283572748630648247895","300420770289793361418986569480340264145","180421665534134034300655699301545002188"],"threshold":0.9},"deprecated":false}],"spl":"2021-12-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-167759047.json"}}],"schema_version":"1.7.5"}