CVE-2023-45781: 
NixOS vulnerability analysis and mitigation

CVE-2023-45781 is a vulnerability discovered in Android's Bluetooth module, specifically in the parse_gap_data function of utils.cc. The vulnerability was disclosed in December 2023 and affects Android versions 12.0 through 14.0. It involves an out-of-bounds read vulnerability due to a missing bounds check (NVD).

The vulnerability is classified as a medium severity issue with a CVSS v3.1 base score of 5.5. The attack requires local access with user execution privileges, and no user interaction is needed for exploitation. The vulnerability is categorized as CWE-125 (Out-of-bounds Read) and stems from insufficient bounds checking in the parse_gap_data function within the Bluetooth module's utils.cc file (NVD).

The vulnerability can lead to local information disclosure, potentially allowing an attacker with local access to obtain sensitive information from the affected device's memory (NVD).

The vulnerability has been addressed through a security patch included in the Android December 2023 security bulletin. The fix involves proper bounds checking implementation in the parse_gap_data function (Android Commit).