CVE-2023-32810

MEDIUM

Linuxfoundation Yocto - Out-of-Bounds Read

Title source: rule
STIX 2.1

Description

In bluetooth driver, there is a possible out of bounds read due to improper input validation. This could lead to local information leak with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07867212; Issue ID: ALPS07867212.

References (1)

Core 1

Scores

CVSS v3 4.4
EPSS 0.0002
EPSS Percentile 6.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-125
Status published
Products (6)
google/android 12.0
google/android 13.0
linux/linux_kernel 4.19
linuxfoundation/yocto 3.1
linuxfoundation/yocto 3.3
linuxfoundation/yocto 4.0
Published Sep 04, 2023
Tracked Since Feb 18, 2026