CVE-2023-45773 – This CVE describes an out-of-bounds write vulne... (How to Fix)

Q: What is the severity of CVE-2023-45773?

CVE-2023-45773 has a CVSS score of 7.8 (HIGH). This CVE describes an out-of-bounds write vulnerability in Android's Bluetooth stack (btm_ble_gap.cc) that allows local privilege escalation. Attackers with user execution privileges can exploit this without user interaction to gain elevated system access. Affects Android devices with vulnerable Bluetooth implementations.

📋 TL;DR

This CVE describes an out-of-bounds write vulnerability in Android's Bluetooth stack (btm_ble_gap.cc) that allows local privilege escalation. Attackers with user execution privileges can exploit this without user interaction to gain elevated system access. Affects Android devices with vulnerable Bluetooth implementations.

💻 Affected Systems

Products:

Android

Versions: Android versions prior to December 2023 security patch

Operating Systems: Android

Default Config Vulnerable: ⚠️ Yes

Notes: Requires Bluetooth functionality to be enabled. Devices with December 2023 or later security patches are protected.

📦 What is this software?

Android by Google

View all CVEs affecting Android →

Android by Google

View all CVEs affecting Android →

⚠️ Risk & Real-World Impact

🔴

Worst Case

Full device compromise allowing attacker to execute arbitrary code with system privileges, potentially installing persistent malware or accessing sensitive data.

🟠

Likely Case

Local privilege escalation allowing attacker to bypass application sandboxing and access system resources or other user data.

🟢

If Mitigated

Limited impact if Bluetooth is disabled or device is patched, with standard Android security controls still providing some protection.

🌐 Internet-Facing: LOW - This is a local vulnerability requiring physical or network proximity via Bluetooth, not directly exploitable over internet.

🏢 Internal Only: MEDIUM - Requires attacker to have local access or be within Bluetooth range, but could be exploited in corporate environments with physical access.

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ✅ No

Complexity: MEDIUM

Requires user execution privileges initially, but no further user interaction. Exploitation requires understanding of Bluetooth stack internals.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: December 2023 Android Security Patch Level or later

Vendor Advisory: https://source.android.com/security/bulletin/2023-12-01

Restart Required: Yes

Instructions:

1. Check for system updates in Settings > System > System update. 2. Install December 2023 or later security patch. 3. Reboot device after installation.

🔧 Temporary Workarounds

Disable Bluetooth

android

Turn off Bluetooth functionality to prevent exploitation

adb shell settings put global bluetooth_on 0
Settings > Connected devices > Connection preferences > Bluetooth > Toggle off

🧯 If You Can't Patch

Disable Bluetooth when not in use and restrict physical access to devices
Implement network segmentation and monitor for unusual Bluetooth activity

🔍 How to Verify

Check if Vulnerable:

Check Android security patch level in Settings > About phone > Android version > Security patch level

Check Version:

adb shell getprop ro.build.version.security_patch

Verify Fix Applied:

Verify security patch level shows December 2023 or later date

📡 Detection & Monitoring

Log Indicators:

Unusual Bluetooth stack crashes in logcat
Suspicious privilege escalation attempts

Network Indicators:

Anomalous Bluetooth pairing attempts
Unexpected Bluetooth service restarts

SIEM Query:

source="android_logs" AND "btm_ble_gap" AND ("crash" OR "segfault" OR "out of bounds")

📊 Metadata

CVE ID: CVE-2023-45773

CVSS v3 Score: 7.8 (HIGH)

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE: CWE-787

Published: December 4, 2023

Last Updated: November 21, 2024

🔗 References

https://android.googlesource.com/platform/packages/modules/Bluetooth/+/7b30443dac7bb9138275c909549110191bcbcae9 Mailing List,Patch
https://source.android.com/security/bulletin/2023-12-01 Patch,Vendor Advisory
https://android.googlesource.com/platform/packages/modules/Bluetooth/+/7b30443dac7bb9138275c909549110191bcbcae9 Mailing List,Patch
https://source.android.com/security/bulletin/2023-12-01 Patch,Vendor Advisory

📤 Share & Export

📄 Export Markdown 📋 Export JSON

🔗 Related Vulnerabilities

If you're affected by CVE-2023-45773, you might also want to check these: