A vulnerability in btif_hh_hsdata_rpt_copy_cb of bta_hh.cc allows for memory corruption due to a use after free. This could lead to local escalation of privilege over Bluetooth without requiring additional execution privileges. User interaction is not necessary for exploitation.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2023-21125 |
Exploitation
To exploit this vulnerability, an attacker can leverage the use after free condition in the Bluetooth stack, allowing them to escalate privileges locally without needing any user interaction. This could potentially enable unauthorized access to sensitive data or system functions.
Affected Products
- Bluetooth Stack: Vulnerable to memory corruption leading to privilege escalation.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by the vendor. Additionally, users should ensure that their Bluetooth settings are configured securely and avoid connecting to untrusted devices.