{"id":"PUB-A-242993878","details":"In ParseBqrLinkQualityEvt of btif_bqr.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-242993878","CVE-2023-20984"],"modified":"2026-04-13T15:04:09.269232Z","published":"2023-06-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2023-06-01"}],"affected":[{"package":{"name":"platform/packages/modules/Bluetooth","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13-next:0"},{"fixed":"13-next:2023-06-01"}]}],"versions":["13-next"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/modules/Bluetooth/+/9bd576f4912cb405fddbf3c3dcd72f25ae8bb623"],"types":["ID"],"severity":"Moderate","vanir_signatures":[{"id":"PUB-A-242993878-09f179d4","deprecated":false,"target":{"file":"system/btif/src/btif_bqr.cc"},"digest":{"threshold":0.9,"line_hashes":["274507125717508761823720715117326337463","250534526309399787941277159275689486665","180637340079350059774962475040796197224","309955202996159853044389784852120825867","253419954661788520912516021457538315870","103721111485077619194432808299173774763","268691132623649112264153132946947280256","164108290758033392082839805664588404989","251811334078139069080402612397102920090","322950099963241760561634733704661803552"]},"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/9bd576f4912cb405fddbf3c3dcd72f25ae8bb623","signature_type":"Line"},{"id":"PUB-A-242993878-669b36bb","deprecated":false,"target":{"file":"system/btif/include/btif_bqr.h"},"digest":{"threshold":0.9,"line_hashes":["208981225525070782590343636221078025618","176309543377281345478870439149057917245","206620382484551893761465528047549985294","35550298959744721389766907235211671095"]},"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/9bd576f4912cb405fddbf3c3dcd72f25ae8bb623","signature_type":"Line"},{"id":"PUB-A-242993878-a82c9a6b","deprecated":false,"target":{"function":"BqrVseSubEvt::ParseBqrLinkQualityEvt","file":"system/btif/src/btif_bqr.cc"},"digest":{"function_hash":"316336693552482996410418077782090412290","length":2175},"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/9bd576f4912cb405fddbf3c3dcd72f25ae8bb623","signature_type":"Function"}],"spl":"2023-06-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-242993878.json"}},{"package":{"name":"platform/packages/modules/Bluetooth","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2023-06-01"}]}],"versions":["13"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ecd5a3e85bcaeeffdfc00eb78d03afc261824ff1"],"types":["ID"],"severity":"Moderate","vanir_signatures":[{"id":"PUB-A-242993878-1951e1ca","deprecated":false,"target":{"function":"BqrVseSubEvt::ParseBqrLinkQualityEvt","file":"system/btif/src/btif_bqr.cc"},"digest":{"function_hash":"316336693552482996410418077782090412290","length":2175},"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ecd5a3e85bcaeeffdfc00eb78d03afc261824ff1","signature_type":"Function"},{"id":"PUB-A-242993878-1e34b4a9","deprecated":false,"target":{"file":"system/btif/include/btif_bqr.h"},"digest":{"threshold":0.9,"line_hashes":["208981225525070782590343636221078025618","176309543377281345478870439149057917245","206620382484551893761465528047549985294","35550298959744721389766907235211671095"]},"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ecd5a3e85bcaeeffdfc00eb78d03afc261824ff1","signature_type":"Line"},{"id":"PUB-A-242993878-8cf02849","deprecated":false,"target":{"file":"system/btif/src/btif_bqr.cc"},"digest":{"threshold":0.9,"line_hashes":["274507125717508761823720715117326337463","250534526309399787941277159275689486665","180637340079350059774962475040796197224","309955202996159853044389784852120825867","253419954661788520912516021457538315870","103721111485077619194432808299173774763","268691132623649112264153132946947280256","164108290758033392082839805664588404989","251811334078139069080402612397102920090","322950099963241760561634733704661803552"]},"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ecd5a3e85bcaeeffdfc00eb78d03afc261824ff1","signature_type":"Line"}],"spl":"2023-06-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-242993878.json"}}],"schema_version":"1.7.5"}