EUVD-2021-3618

Malicious code in bioql PyPI...

Design/Logic Flaw

In the broadcast definition in AndroidManifest.xml, there is a possible way to set the A2DP bluetooth device connection state due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2021-0999: Missing Authorization

In the broadcast definition in AndroidManifest.xml, there is a possible way to set the A2DP bluetooth device connection state due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

PT-2021-13404

Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description The issue is related to a missing permission check in the broadcast definition in AndroidManifest.xml, which could allow setting the A2DP bluetooth device connection state. This could lead to local...

PUB-A-196858999

In the broadcast definition in AndroidManifest.xml, there is a possible way to set the A2DP bluetooth device connection state due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...