ASB-A-203431023 — Vulnetix

ASB-A-203431023 PUBLISHED

In setScanMode of AdapterService.java, there is a possible way to enable Bluetooth discovery mode without user interaction due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.

Affected Products

Vendor	Product	Versions
platform	packages/modules/Bluetooth	12L-next:0, 12L-next, 12L-next
platform	packages/apps/Bluetooth	10, 12:0, 12

Timeline

Jun 1, 2022 CVE Published
May 15, 2026 CVE Updated

References

https://source.android.com/security/bulletin/2022-06-01 advisory
https://android.googlesource.com/platform/packages/apps/Bluetooth/+/e49e5dc377dd39c523c287b71c0831159e2cc6ae patch

Open in Interactive Console →