Bluetooth App loophole series analysis of the three CVE-2017-0645-vulnerability warning-the black bar safety net

0x01 vulnerability profile Android 6 months of security bulletins, at the same time also repair the we found a Bluetooth App mentioning the right to risk the vulnerability, the vulnerability allows the phone to local unprivileged malicious program constructed a counterfeit of the Provider and get...

CVE-2017-0645

CVE-2017-0645 describes an elevation-of-privilege vulnerability in Android’s Bluetooth stack. A local malicious application could access data outside its permission levels. Affected products/versions: Android 6.0.1, 7.0, 7.1.1, 7.1.2. Root cause: Bluetooth exposure allowing unauthorized data acce...