Microchip RN4870 安全漏洞

The Microchip RN4870 is a Bluetooth low power module chip from Microchip, Inc. A security vulnerability exists in the Microchip RN4870 module firmware version 1.43, which originates from accepting PauseEncReqPlainText before pairing is complete, the low-power Bluetooth implementation enters a...

CVE-2019-2036

In okToConnect of HidHostService.java, there is a possible permission bypass due to an incorrect state check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0...