Affected Products
| Vendor | Product | Versions |
|---|---|---|
| platform | packages/apps/Settings | 10:0, 12L:0, 12L |
Timeline
- Aug 1, 2022 CVE Published
- May 15, 2026 CVE Updated
In onAttach of ConnectedDeviceDashboardFragment.java, there is a possible permission bypass due to a confused deputy. This could lead to remote escalation of privilege in Bluetooth settings with no additional execution privileges needed. User interaction is not needed for exploitation.
| Vendor | Product | Versions |
|---|---|---|
| platform | packages/apps/Settings | 10:0, 12L:0, 12L |