Lucene search

K
osvGoogleOSV:ASB-A-180747689
HistoryNov 01, 2021 - 12:00 a.m.

[Making BluetoothPermissionActivity Show Deceptive Text to Trick User Into Granting PBAP Access After setRemoteAlias with CRLF Characters]

2021-11-0100:00:00
Google
osv.dev
8
bluetoothdevice
permission
vulnerability
user interaction
local information disclosure

EPSS

0.001

Percentile

18.7%

In getAlias of BluetoothDevice.java, there is a possible way to create misleading permission dialogs due to missing data filtering. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation.

EPSS

0.001

Percentile

18.7%

Related for OSV:ASB-A-180747689