JXL 9 Inch Car Android Double Din Player Bluetooth Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in the Bluetooth firmware of the JXL 9 Inch Car Android Double Din Player running Android 12.0. This issue allows attackers to disrupt the infotainment system by sending crafted Link Manager Protocol (LMP) packets, causing a buffer overflow and subsequent denial-of-service condition.

Impact

Exploitation of this vulnerability leads to a buffer overflow in the infotainment system, causing a denial-of-service condition.

Reproduction

The vulnerability can be reproduced by an attacker within Bluetooth range who transmits crafted LMP packets during the connection setup process. This exploitation causes a buffer overflow, leading to a denial-of-service condition in the affected infotainment system.