CVE-2020-0298

In Bluetooth, there is a possible control over Bluetooth enabled state due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID...

CVE-2020-0298

CVE-2020-0298: A local elevation-of-privilege in Android 11 Bluetooth due to a missing permission check that allows an attacker to enable/disable Bluetooth without user interaction. Affects Bluetooth subsystem; root cause is lack of permission validation in Bluetooth flow, enabling local privileg...