Information disclosure

In sspRequestCallback of BondStateMachine.java, there is a possible leak of Bluetooth MAC addresses due to log information disclosure. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2021-0549

CVE-2021-0549 affects Android 11 (Android-11) Bluetooth stack; the vulnerability is in sspRequestCallback within BondStateMachine.java, where log statements can leak Bluetooth MAC addresses, causing local information disclosure with potentially SYSTEM-level privileges. The issue is confirmed acro...

PT-2021-13196

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: The issue is related to a possible leak of Bluetooth MAC addresses due to log information disclosure in the sspRequestCallback of BondStateMachine.java. This could lead to local information disclosure...

CVE-2021-0549: Insertion of Sensitive Information into Log File

In sspRequestCallback of BondStateMachine.java, there is a possible leak of Bluetooth MAC addresses due to log information disclosure. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

Google Android Log Information Leak Vulnerability

Google Android is a Linux-based open source operating system from the Google Open Handheld Consortium Google. An information disclosure vulnerability exists in Google Android sspRequestCallback. An attacker can exploit this vulnerability to cause information disclosure...