PT-2021-13189
CVE-2021-0542
·
تاريخ النشر
2021-06-22
·
تاريخ التحديث
2022-07-12
الوصف من
CVSS 3.1
5.5
متوسطةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions:
Android versions Android-11
Description:
The issue is related to a missing permission check in the
updateNotification function of BeamTransferManager.java. This could lead to local information disclosure of paired Bluetooth addresses without requiring additional execution privileges. User interaction is necessary for exploitation.Recommendations:
For Android version Android-11, update to a version that includes the fix for the missing permission check in
BeamTransferManager.java.
As a temporary workaround, consider restricting access to the updateNotification function until a patch is available. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾