CVE-2021-0319

In checkCallerIsSystemOr of CompanionDeviceManagerService.java, there is a possible way to get a nearby Bluetooth device's MAC address without appropriate permissions due to a permissions bypass. This could lead to local escalation of privilege that grants access to nearby MAC addresses, with Use...

CVE-2021-0319

CVE-2021-0319 affects Android versions 8.0 through 11. It concerns CompanionDeviceManagerService.checkCallerIsSystemOr, where a permissions bypass may allow a local attacker to obtain a nearby Bluetooth device’s MAC address without proper permissions, enabling local privilege escalation to access...