PT-2021-13189
CVE-2021-0542
·
Published
2021-06-22
·
Updated
2022-07-12
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions:
Android versions Android-11
Description:
The issue is related to a missing permission check in the
updateNotification function of BeamTransferManager.java. This could lead to local information disclosure of paired Bluetooth addresses without requiring additional execution privileges. User interaction is necessary for exploitation.Recommendations:
For Android version Android-11, update to a version that includes the fix for the missing permission check in
BeamTransferManager.java.
As a temporary workaround, consider restricting access to the updateNotification function until a patch is available. Found an issue in the description? Have something to add? Feel free to write us 👾