CVE-2023-20946

In onStart of BluetoothSwitchPreferenceController.java, there is a possible permission bypass due to a confused deputy. This could lead to remote escalation of privilege in Bluetooth settings with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2023-20946

creationtimestamp| type| source ---|---|--- 2023-03-23 21:46:51+00:00| seen| https://t.me/cibsecurity/59119...

CVE-2023-20946

In onStart of BluetoothSwitchPreferenceController.java, there is a possible permission bypass due to a confused deputy. This could lead to remote escalation of privilege in Bluetooth settings with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2023-20946

In onStart of BluetoothSwitchPreferenceController.java, there is a possible permission bypass due to a confused deputy. This could lead to remote escalation of privilege in Bluetooth settings with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2023-20946

CVE-2023-20946 affects Android 11–13 (Android 11, 12, 12L, 13). Root cause is a permission bypass in onStart of BluetoothSwitchPreferenceController.java (confused deputy), enabling remote elevation of privilege in Bluetooth settings with no user interaction. The NVD metrics show a critical CVSS v...