CVE-2021-3588: memory contents disclosure in cli_feat_read_cb

Vulnerability summary

CVE-2021-3588 is a low (CVSS 3.3) Out-of-bounds Read vulnerability in bluez. EPSS estimates a 0.45% chance of exploitation in the next 30 days, higher than 39.1% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 10-06-2021
   PublishedVulnerability first disclosed.
2. 16-09-2024
   Last modifiedVulnerability information updated.

Description

The cli_feat_read_cb() function in src/gatt-database.c does not perform bounds checks on the 'offset' variable before using it as an index into an array for reading.

• CWE-125Out-of-bounds ReadThe product reads data past the end, or before the beginning, of the intended buffer.
• CWE-788Access of Memory Location After End of BufferThe product reads or writes to a buffer using an index or pointer that references a memory location after the end of the buffer.