Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
memory contents disclosure in cli_feat_read_cb
Vulnerability Description
The cli_feat_read_cb() function in src/gatt-database.c does not perform bounds checks on the 'offset' variable before using it as an index into an array for reading.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Vulnerability Type
在缓冲区结束位置之后访问内存
Vulnerability Title
BlueZ 缓冲区错误漏洞
Vulnerability Description
BlueZ是一款使用C语言编写的蓝牙协议堆栈，它主要用于提供对核心蓝牙层和协议的支持。 bluez存在缓冲区错误漏洞，该漏洞源于src/gatt-database.c 中的 cli_feat_read_cb() 函数在将 “offset” 变量用作读取数组的索引之前不会对其执行边界检查。
CVSS Information
N/A
Vulnerability Type
N/A