{"id":"PUB-A-260568359","details":"In btm_delete_stored_link_key_complete of btm_devctl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure over Bluetooth with System execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-260568359","CVE-2023-21202"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2023-06-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2023-06-01"}],"affected":[{"package":{"name":"platform/packages/modules/Bluetooth","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13-next:0"},{"fixed":"13-next:2023-06-01"}]}],"versions":["13-next"],"ecosystem_specific":{"vanir_signatures":[{"source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/b5e669088a0f35a1c572c7c5584aba5984201096","target":{"file":"system/stack/include/dev_hci_link_interface.h"},"deprecated":false,"digest":{"line_hashes":["98965523080780723292383223051741451175","238562866666299813260050517692436726190","57171793699071419602598603781386282873","260570040915377613425087713965400794775"],"threshold":0.9},"id":"PUB-A-260568359-611ea43d","signature_type":"Line","signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/b5e669088a0f35a1c572c7c5584aba5984201096","target":{"file":"system/stack/btm/btm_devctl.cc","function":"btm_delete_stored_link_key_complete"},"deprecated":false,"digest":{"length":321,"function_hash":"55099561426096689871163446569072901471"},"id":"PUB-A-260568359-79980576"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/b5e669088a0f35a1c572c7c5584aba5984201096","target":{"file":"system/test/mock/mock_stack_btm_devctl.cc","function":"btm_delete_stored_link_key_complete"},"deprecated":false,"digest":{"function_hash":"169374124789351054910390426051703354470","length":78},"id":"PUB-A-260568359-9c2f117d","signature_type":"Function"},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["61104440036987013836437442728002713633","212480365180903595263967169120925441141","290654202196679177042715032227782482657","151691778852868897783357114273059004111"]},"id":"PUB-A-260568359-b797e441","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/b5e669088a0f35a1c572c7c5584aba5984201096","target":{"file":"system/stack/btu/btu_hcif.cc"}},{"deprecated":false,"digest":{"line_hashes":["257705006674170288105204431726969833650","94298630825567353657321792482623911432","61925990775034003165231748046859349954","142711564351958968069842680173332944423"],"threshold":0.9},"id":"PUB-A-260568359-e0eb49ab","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/b5e669088a0f35a1c572c7c5584aba5984201096","target":{"file":"system/test/mock/mock_stack_btm_devctl.cc"}},{"source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/b5e669088a0f35a1c572c7c5584aba5984201096","target":{"file":"system/stack/btm/btm_devctl.cc"},"deprecated":false,"digest":{"line_hashes":["157935162887595837878156488262256160825","276760555319270639680179070830110401814","240996534110281433260094547482428014817","173276685202535898872685169339980353037","176789120198958218416293170902771064640","90690984741835290059486515496157992019","251427702170046719072007453278918090304"],"threshold":0.9},"id":"PUB-A-260568359-e86cf7d2","signature_type":"Line","signature_version":"v1"},{"id":"PUB-A-260568359-f5dbfb1e","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/b5e669088a0f35a1c572c7c5584aba5984201096","target":{"function":"btu_hcif_hdl_command_complete","file":"system/stack/btu/btu_hcif.cc"},"deprecated":false,"digest":{"length":2098,"function_hash":"257010832042188423388289082366036976127"}}],"fixes":["https://android.googlesource.com/platform/packages/modules/Bluetooth/+/b5e669088a0f35a1c572c7c5584aba5984201096"],"severity":"Moderate","spl":"2023-06-01","types":["ID"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-260568359.json"}},{"package":{"name":"platform/packages/modules/Bluetooth","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2023-06-01"}]}],"versions":["13"],"ecosystem_specific":{"spl":"2023-06-01","types":["ID"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/0ab9b9257ac12744acd55341a858efd41b48d30c","target":{"file":"system/test/mock/mock_stack_btm_devctl.cc","function":"btm_delete_stored_link_key_complete"},"deprecated":false,"digest":{"function_hash":"169374124789351054910390426051703354470","length":78},"id":"PUB-A-260568359-01d5a1b7","signature_type":"Function","signature_version":"v1"},{"target":{"file":"system/test/mock/mock_stack_btm_devctl.cc"},"deprecated":false,"digest":{"line_hashes":["257705006674170288105204431726969833650","94298630825567353657321792482623911432","61925990775034003165231748046859349954","142711564351958968069842680173332944423"],"threshold":0.9},"id":"PUB-A-260568359-7151aecc","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/0ab9b9257ac12744acd55341a858efd41b48d30c"},{"source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/0ab9b9257ac12744acd55341a858efd41b48d30c","target":{"file":"system/stack/btm/btm_devctl.cc"},"deprecated":false,"digest":{"line_hashes":["39834363574228249638723728818141329806","276760555319270639680179070830110401814","240996534110281433260094547482428014817","173276685202535898872685169339980353037","176789120198958218416293170902771064640","90690984741835290059486515496157992019","251427702170046719072007453278918090304"],"threshold":0.9},"id":"PUB-A-260568359-98b3ce98","signature_type":"Line","signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/0ab9b9257ac12744acd55341a858efd41b48d30c","target":{"file":"system/stack/btu/btu_hcif.cc","function":"btu_hcif_hdl_command_complete"},"deprecated":false,"digest":{"function_hash":"235604982423465775564157247840940631481","length":1979},"id":"PUB-A-260568359-aafafe1d"},{"target":{"file":"system/stack/btu/btu_hcif.cc"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["61104440036987013836437442728002713633","212480365180903595263967169120925441141","290654202196679177042715032227782482657","151691778852868897783357114273059004111"]},"id":"PUB-A-260568359-b6c10920","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/0ab9b9257ac12744acd55341a858efd41b48d30c"},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/0ab9b9257ac12744acd55341a858efd41b48d30c","target":{"file":"system/stack/include/dev_hci_link_interface.h"},"deprecated":false,"digest":{"line_hashes":["98965523080780723292383223051741451175","238562866666299813260050517692436726190","57171793699071419602598603781386282873","260570040915377613425087713965400794775"],"threshold":0.9},"id":"PUB-A-260568359-ba79fc41"},{"source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/0ab9b9257ac12744acd55341a858efd41b48d30c","target":{"file":"system/stack/btm/btm_devctl.cc","function":"btm_delete_stored_link_key_complete"},"deprecated":false,"digest":{"length":321,"function_hash":"55099561426096689871163446569072901471"},"id":"PUB-A-260568359-d9310ae7","signature_type":"Function","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/packages/modules/Bluetooth/+/0ab9b9257ac12744acd55341a858efd41b48d30c"],"severity":"Moderate"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-260568359.json"}}],"schema_version":"1.9.0"}