ASB-A-203431023 PUBLISHED

In setScanMode of AdapterService.java, there is a possible way to enable Bluetooth discovery mode without user interaction due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.

Affected Products

VendorProductVersions
platformpackages/modules/Bluetooth12L-next:0, 12L-next, 12L-next
platformpackages/apps/Bluetooth10, 12:0, 12

Timeline

References

Open in Interactive Console →