In transcodeQ*ToFloat of btif_avrcp_audio_track.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to paired device escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
google android 11.0 |
||
google android 12.0 |
||
google android 12.1 |
||
google android 13.0 |
||
google android 14.0 |
Vulmon