Design/Logic Flaw

In the broadcast definition in AndroidManifest.xml, there is a possible way to set the A2DP bluetooth device connection state due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

PT-2021-13404

Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description The issue is related to a missing permission check in the broadcast definition in AndroidManifest.xml, which could allow setting the A2DP bluetooth device connection state. This could lead to local...