[Phone] Secretly pair a remote Bluetooth device without user consent

2021-12-0100:00:00

Google

osv.dev

bluetooth

android

vulnerability

permission

escalation

exploitation

settings

AI Score

8.5

Confidence

High

EPSS

Percentile

16.3%

JSON

In AndroidManifest.xml of Settings, there is a possible pairing of a Bluetooth device without user’s consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

source.android.com/security/bulletin/2021-12-01