CVE-2018-9483

In bta_dm_remove_sec_dev_entry of bta_dm_act.cc, there is a possible out of bounds read due to a use after free

Medium · published November 20, 2024

CVSS v3.1
6.5
EPSS
0%
Percentile
3.5
In the wild
Unconfirmed
What it is

In bta_dm_remove_sec_dev_entry of bta_dm_act.cc, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure over bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00146 · 3.5th percentile
Published
2024-11-20T17:43Z
EPSS history
Timeline
  • 20 NOV 17:43Z
    In bta_dm_remove_sec_dev_entry of bta_dm_act.cc, there is a possible out of bounds read due to a use after free
    cvelistv5