Lucene search

K
osvGoogleOSV:ASB-A-251514170
HistoryJul 01, 2024 - 12:00 a.m.

1.1 Bypassing passkey entry in legacy pairing - Pixel 4a, Pixel 3 XL

2024-07-0100:00:00
Google
osv.dev
1
legacy pairing
authentication bypass
remote privilege escalation
ble
pixel 4a
pixel 3 xl

7.9 High

AI Score

Confidence

High

In smp_proc_rand of smp_act.cc, there is a possible authentication bypass during legacy BLE pairing due to incorrect implementation of a protocol. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

7.9 High

AI Score

Confidence

High