Description

In multiple locations of avrc, there is a possible leak of heap data due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Related CPE's

o

google

android

11.0

-

Vulnerable

References

https://source.android.com/security/bulletin/wear/2023-08-01

Broken Link

Weaknesses

[email protected]

Primary
CWE-908

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.5 · High

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2023-08-14T22:15:12.397

11 months ago

Last modified

2023-08-18T19:29:16.643

11 months ago