App can set Scan Mode of device' s Bluetooth without showing system dialog to user.

2022-06-0100:00:00

Google

osv.dev

0.0004 Low

EPSS

Percentile

5.1%

JSON

In setScanMode of AdapterService.java, there is a possible way to enable Bluetooth discovery mode without user interaction due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.

CPENameOperatorVersion
platform/packages/modules/bluetootheq10
platform/packages/modules/bluetootheq12
platform/packages/modules/bluetootheq11
platform/packages/modules/bluetootheq12L

Name	Operator	Version
platform/packages/modules/bluetooth	eq	10
platform/packages/modules/bluetooth	eq	12
platform/packages/modules/bluetooth	eq	11
platform/packages/modules/bluetooth	eq	12L