{"id":"PUB-A-242993878","details":"In ParseBqrLinkQualityEvt of btif_bqr.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-242993878","CVE-2023-20984"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2023-06-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2023-06-01"}],"affected":[{"package":{"name":"platform/packages/modules/Bluetooth","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13-next:0"},{"fixed":"13-next:2023-06-01"}]}],"versions":["13-next"],"ecosystem_specific":{"types":["ID"],"vanir_signatures":[{"id":"PUB-A-242993878-09f179d4","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/9bd576f4912cb405fddbf3c3dcd72f25ae8bb623","target":{"file":"system/btif/src/btif_bqr.cc"},"deprecated":false,"digest":{"line_hashes":["274507125717508761823720715117326337463","250534526309399787941277159275689486665","180637340079350059774962475040796197224","309955202996159853044389784852120825867","253419954661788520912516021457538315870","103721111485077619194432808299173774763","268691132623649112264153132946947280256","164108290758033392082839805664588404989","251811334078139069080402612397102920090","322950099963241760561634733704661803552"],"threshold":0.9}},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/9bd576f4912cb405fddbf3c3dcd72f25ae8bb623","target":{"file":"system/btif/include/btif_bqr.h"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["208981225525070782590343636221078025618","176309543377281345478870439149057917245","206620382484551893761465528047549985294","35550298959744721389766907235211671095"]},"id":"PUB-A-242993878-669b36bb"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/9bd576f4912cb405fddbf3c3dcd72f25ae8bb623","target":{"file":"system/btif/src/btif_bqr.cc","function":"BqrVseSubEvt::ParseBqrLinkQualityEvt"},"deprecated":false,"digest":{"function_hash":"316336693552482996410418077782090412290","length":2175},"id":"PUB-A-242993878-a82c9a6b","signature_type":"Function"}],"fixes":["https://android.googlesource.com/platform/packages/modules/Bluetooth/+/9bd576f4912cb405fddbf3c3dcd72f25ae8bb623"],"severity":"Moderate","spl":"2023-06-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-242993878.json"}},{"package":{"name":"platform/packages/modules/Bluetooth","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2023-06-01"}]}],"versions":["13"],"ecosystem_specific":{"vanir_signatures":[{"target":{"function":"BqrVseSubEvt::ParseBqrLinkQualityEvt","file":"system/btif/src/btif_bqr.cc"},"deprecated":false,"digest":{"length":2175,"function_hash":"316336693552482996410418077782090412290"},"id":"PUB-A-242993878-1951e1ca","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ecd5a3e85bcaeeffdfc00eb78d03afc261824ff1"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ecd5a3e85bcaeeffdfc00eb78d03afc261824ff1","target":{"file":"system/btif/include/btif_bqr.h"},"deprecated":false,"digest":{"line_hashes":["208981225525070782590343636221078025618","176309543377281345478870439149057917245","206620382484551893761465528047549985294","35550298959744721389766907235211671095"],"threshold":0.9},"id":"PUB-A-242993878-1e34b4a9","signature_type":"Line"},{"id":"PUB-A-242993878-8cf02849","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ecd5a3e85bcaeeffdfc00eb78d03afc261824ff1","target":{"file":"system/btif/src/btif_bqr.cc"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["274507125717508761823720715117326337463","250534526309399787941277159275689486665","180637340079350059774962475040796197224","309955202996159853044389784852120825867","253419954661788520912516021457538315870","103721111485077619194432808299173774763","268691132623649112264153132946947280256","164108290758033392082839805664588404989","251811334078139069080402612397102920090","322950099963241760561634733704661803552"]}}],"fixes":["https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ecd5a3e85bcaeeffdfc00eb78d03afc261824ff1"],"severity":"Moderate","spl":"2023-06-01","types":["ID"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-242993878.json"}}],"schema_version":"1.9.0"}