App can set discoverable timeout of device' s Bluetooth without showing system dialog to user.

2022-06-0100:00:00

Google

osv.dev

0.0004 Low

EPSS

Percentile

5.1%

JSON

In setDiscoverableTimeout of AdapterService.java, there is a possible bypass of user interaction due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.

CPENameOperatorVersion
platform/packages/modules/bluetootheq10
platform/packages/modules/bluetootheq12
platform/packages/modules/bluetootheq11
platform/packages/modules/bluetootheq12L

Name	Operator	Version
platform/packages/modules/bluetooth	eq	10
platform/packages/modules/bluetooth	eq	12
platform/packages/modules/bluetooth	eq	11
platform/packages/modules/bluetooth	eq	12L