Make Bluetooth discoverable without additional permission

2022-01-0100:00:00

Google

osv.dev

0.0004 Low

EPSS

Percentile

5.1%

JSON

In onAttach of ConnectedDeviceDashboardFragment.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege in Bluetooth settings with no additional execution privileges needed. User interaction is not needed for exploitation.

CPENameOperatorVersion
platform/packages/apps/settingseq9
platform/packages/apps/settingseq11
platform/packages/apps/settingseq12
platform/packages/apps/settingseq10