CVE-2023-21188

Summary

CVE-2023-21188 is a heap buffer overflow vulnerability affecting the Android operating system in the btm_ble_update_inq_result function of btm_ble_gap.cc. This issue can result in a possible out-of-bounds read, leading to local information disclosure. Notably, system execution privileges are required for exploitation, making this a significant security concern for Android devices running Android-13. No user interaction is necessary for an attacker to exploit this vulnerability. The Android ID associated with this issue is A-264624283.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.