VDB
ASB-A-174886838
ASB-A-174886838
PUBLISHED
CVSS 8.600000381469727 HIGH
In smp_process_pairing_public_key of smp_act.cc, there is a possible interception of Bluetooth pairing from an on-path attacker due to improperly used crypto. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Risk Scores
CVSS 4.0
8.600000381469727
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| platform | system/bt | 8.1:0, 8.1, 9:0 |
Exploit Intelligence
- vuln_scanner.py (github-poc)
Timeline
- Jun 1, 2021 CVE Published
- May 15, 2026 CVE Updated