PT-2021-13422
CVE-2021-1017
·
تاريخ النشر
2021-12-15
·
تاريخ التحديث
2021-12-20
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Android version Android-12
Description
In the AdapterService and GattService definition of AndroidManifest.xml, there is a possible way to disable bluetooth connection due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
Recommendations
For Android version Android-12, update to a version that includes the fix for the missing permission check in the AdapterService and GattService definition of AndroidManifest.xml. As a temporary workaround, consider restricting access to the bluetooth connection functionality until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾