cras:cras_fl_media_fuzzer: Use-of-uninitialized-value in validate_bluetooth_device_address

Detailed Report: https://oss-fuzz.com/testcase?key=6559408940187648 Project: cras Fuzzing Engine: libFuzzer Fuzz Target: crasflmediafuzzer Job Type: libfuzzermsancras Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: validatebluetoothdeviceaddress...

CVE-2020-26555

Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B through 5.2 may permit an unauthenticated nearby device to spoof the BDADDR of the peer device to complete pairing without knowledge of the PIN...