CVE-2024-23717

2024-03-1117:15:46

[email protected]

web.nvd.nist.gov

improper input validation

remote privilege escalation

proximal

adjacent

access secure service

keystroke injection

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

In access_secure_service_from_temp_bond of btm_sec.cc, there is a possible way to achieve keystroke injection due to improper input validation. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.