Information disclosure

In sspRequestCallback of BondStateMachine.java, there is a possible leak of Bluetooth MAC addresses due to log information disclosure. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2021-0549

CVE-2021-0549 affects Android 11 (Android-11) Bluetooth stack; the vulnerability is in sspRequestCallback within BondStateMachine.java, where log statements can leak Bluetooth MAC addresses, causing local information disclosure with potentially SYSTEM-level privileges. The issue is confirmed acro...

Google Android 日志信息泄露漏洞

Google Android is a Linux-based open source operating system from the Google Open Handheld Consortium Google. An information disclosure vulnerability exists in Google Android sspRequestCallback. An attacker can exploit this vulnerability to cause information disclosure...