CVE-2024-0030
MEDIUMAndroid - Out-of-Bounds Read in btif_to_bta_response
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2024-0030. PoCs published by uthrasri.
AI-analyzed exploit summary The repository contains a partial code snippet from `btif_gatt_util.c`, which is part of the Bluetooth stack. It includes utility functions for UUID handling and GATT operations but lacks exploit-specific code or a clear demonstration of CVE-2024-0030. The file appears to be a legitimate component of the Bluetooth system, possibly used for reference or analysis.
Description
In btif_to_bta_response of btif_gatt_util.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Exploits (1)
The repository contains a partial code snippet from `btif_gatt_util.c`, which is part of the Bluetooth stack. It includes utility functions for UUID handling and GATT operations but lacks exploit-specific code or a clear demonstration of CVE-2024-0030. The file appears to be a legitimate component of the Bluetooth system, possibly used for reference or analysis.
References (2)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N