Critical severity9.8NVD Advisory· Published Sep 11, 2023· Updated Jun 17, 2026

CVE-2023-35681

Description

In eatt_l2cap_reconfig_completed of eatt_impl.h, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Google/Android3 versions
cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: 13

Patches

Vulnerability mechanics

References

android.googlesource.com/platform/packages/modules/Bluetooth/+/d8d95291f16a8f18f8ffbd6322c14686897c5730nvdVendor Advisory
source.android.com/security/bulletin/2023-09-01nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000