CVE-2023-20985

In BTA_GATTS_HandleValueIndication of bta_gatts_api.cc, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-245915315

• CWE-787

• https://source.android.com/security/bulletin/pixel/2023-06-01
• https://source.android.com/security/bulletin/pixel/2023-06-01

Published

Mar 24, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-2098A vulnerability was found in SourceCodester Vehicle Service …6.1
• CVE-2023-20980In btu_ble_ll_conn_param_upd_evt of btu_hcif.cc, there is a …5.5
• CVE-2023-20981In btu_ble_rc_param_req_evt of btu_hcif.cc, there is a possi…4.4
• CVE-2023-20982In btm_read_tx_power_complete of btm_acl.cc, there is a poss…4.4
• CVE-2023-20983In btm_ble_rand_enc_complete of btm_ble.cc, there is a possi…4.4
• CVE-2023-20984In ParseBqrLinkQualityEvt of btif_bqr.cc, there is a possibl…4.4
• CVE-2023-20986In btm_ble_clear_resolving_list_completecomplete of btm_ble_…4.4
• CVE-2023-20987In btm_read_link_quality_complete of btm_acl.cc, there is a …4.5
• CVE-2023-20988In btm_read_rssi_complete of btm_acl.cc, there is a possible…4.5
• CVE-2023-20989In btm_ble_write_adv_enable_complete of btm_ble_gap.cc, ther…4.4
• CVE-2023-2099A vulnerability classified as problematic has been found in …6.1
• CVE-2023-20990In btm_ble_rand_enc_complete of btm_ble.cc, there is a possi…4.4