CVE-2023-35657

MediumCVSS 4.0/10Last modified Jun 17, 2026

Description

In bta_av_config_ind of bta_av_aact.cc, there is a possible out of bounds read due to type confusion. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 4.0/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published: Sep 4, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2023

CVE-2023-356588.8In gatt_process_prep_write_rsp of gatt_cl.cc, there is a possible privilege escalation due to a use after free. This could lead to remote (p CVE-2023-356597.8In DevmemIntChangeSparse of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in the code. This could le CVE-2023-35666.5A vulnerability was found in wallabag 2.5.4. It has been declared as problematic. Affected by this vulnerability is an unknown functionality CVE-2023-356606.7In lwis_transaction_client_cleanup of lwis_transaction.c, there is a possible way to corrupt memory due to a use after free. This could lead CVE-2023-356617.5In ProfSixDecomTcpSACKoption of RohcPacketCommon.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead CVE-2023-356629.8there is a possible out of bounds write due to buffer overflow. This could lead to remote code execution with no additional execution privil CVE-2023-356637.5In Init of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote infor CVE-2023-356645.5In convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to loc CVE-2023-356657.8In multiple files, there is a possible way to import a contact from another user due to a missing permission check. This could lead to local CVE-2023-356667.8In bta_av_rc_msg of bta_av_act.cc, there is a possible use after free due to a logic error in the code. This could lead to local escalation CVE-2023-356677.8In updateList of NotificationAccessSettings.java, there is a possible way to hide approved notification listeners in the settings due to a l CVE-2023-356685.5In visitUris of Notification.java, there is a possible way to display images from another user due to a confused deputy. This could lead to