PT-2022-20262
CVE-2022-30725
·
تاريخ النشر
2022-06-07
·
تاريخ التحديث
2022-06-11
الوصف من
CVSS 3.1
4.3
متوسطةالمقاييسAV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Bluetooth prior to SMR Jun-2022 Release 1
Description
The issue concerns broadcasting an Intent including the BluetoothDevice object without proper restriction of receivers in the sendIntentSessionError function of Bluetooth. This leaks the MAC address of the connected Bluetooth device.
Recommendations
For Bluetooth prior to SMR Jun-2022 Release 1, update to SMR Jun-2022 Release 1 or later to resolve the issue. As a temporary workaround, consider restricting access to the sendIntentSessionError function to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾