Lucene search

K
osvGoogleOSV:ASB-A-277333781
HistoryJul 01, 2023 - 12:00 a.m.

Bypass DISALLOW_CONFIG_LOCATION to enable/disable bluetooth scanning via slice URI

2023-07-0100:00:00
Google
osv.dev
7
bluetooth scanning
device policy restriction
local privilege escalation
missing permission check
user interaction

EPSS

0

Percentile

5.1%

In getAvailabilityStatus of BluetoothScanningMainSwitchPreferenceController.java, there is a possible way to bypass a device policy restriction due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

EPSS

0

Percentile

5.1%

Related for OSV:ASB-A-277333781