A vulnerability in btif_hh_hsdata_rpt_copy_cb of bta_hh.cc allows for memory corruption due to a use after free. This could lead to local escalation of privilege over Bluetooth without requiring additional execution privileges. User interaction is not necessary for exploitation.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8 | CVE-2023-21125 |
Exploitation
The vulnerability can be exploited by an attacker within the Bluetooth range of the affected device. By sending specially crafted Bluetooth packets, the attacker can trigger the use after free condition, leading to memory corruption and potential privilege escalation.
Affected Products
- Bluetooth stack in Android: Vulnerable to local privilege escalation through Bluetooth interactions.
Mitigation
To mitigate this vulnerability, users should ensure their devices are updated with the latest security patches provided by Android. Additionally, disabling Bluetooth when not in use can reduce the risk of exploitation.