CVE-2023-35666

Summary

CVE-2023-35666 is a newly identified vulnerability affecting the bta\_av\_rc\_msg function in the bta\_av\_act.cc file. This issue arises due to a logic error, resulting in a possible use-after-free condition. An attacker who successfully exploits this flaw can escalate local privileges, gaining elevated access to the system without requiring further execution privileges. Notably, user interaction is not a prerequisite for exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.