{"id":"PUB-A-259939364","details":"In GetNextSourceDataPacket of bta_av_co.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-259939364","CVE-2023-20979"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2023-06-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2023-06-01"}],"affected":[{"package":{"name":"platform/packages/modules/Bluetooth","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13-next:0"},{"fixed":"13-next:2023-06-01"}]}],"versions":["13-next"],"ecosystem_specific":{"vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"68312514783393375376491442857347895607","length":656},"id":"PUB-A-259939364-218b2852","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5946a100794e0eb1e0519c3e7c59f786122d0187","target":{"file":"system/btif/co/bta_av_co.cc","function":"BtaAvCo::GetNextSourceDataPacket"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5946a100794e0eb1e0519c3e7c59f786122d0187","target":{"file":"system/btif/co/bta_av_co.cc"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["161183521912883116953634733588585528638","263017058269110889664582222192320530495","59932838030822296409218820625391713051","27537696714373164170756535549669056300","189297608011206741670417773581767248755","188619888321411486541850236537275793832","42355838957451292630597621418517988638","247888066799516346923442549948201153830","54369852772563546560872254441792847733","224678961793319662951023597222471083008","263198018216434469173321943830983498224"]},"id":"PUB-A-259939364-38a6414e","signature_type":"Line"}],"fixes":["https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5946a100794e0eb1e0519c3e7c59f786122d0187"],"severity":"Moderate","spl":"2023-06-01","types":["ID"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-259939364.json"}},{"package":{"name":"platform/packages/modules/Bluetooth","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2023-06-01"}]}],"versions":["13"],"ecosystem_specific":{"severity":"Moderate","spl":"2023-06-01","types":["ID"],"vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"68312514783393375376491442857347895607","length":656},"id":"PUB-A-259939364-23d7cf1e","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d1047690350268516c195f216fa5864f50917528","target":{"file":"system/btif/co/bta_av_co.cc","function":"BtaAvCo::GetNextSourceDataPacket"}},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d1047690350268516c195f216fa5864f50917528","target":{"file":"system/btif/co/bta_av_co.cc"},"deprecated":false,"digest":{"line_hashes":["192565387945466886362970285731083404212","254531881871507020854838720218908143988","192721593183597586998319003883422673742","99010478480203160764500386473031766465","161183521912883116953634733588585528638","263017058269110889664582222192320530495","59932838030822296409218820625391713051","189297608011206741670417773581767248755","188619888321411486541850236537275793832","42355838957451292630597621418517988638","247888066799516346923442549948201153830"],"threshold":0.9},"id":"PUB-A-259939364-e4170928"}],"fixes":["https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d1047690350268516c195f216fa5864f50917528"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-259939364.json"}}],"schema_version":"1.9.0"}