CVE-2022-30725

Name of the Vulnerable Software and Affected Versions Bluetooth prior to SMR Jun-2022 Release 1

Description The issue concerns broadcasting an Intent including the BluetoothDevice object without proper restriction of receivers in the sendIntentSessionError function of Bluetooth. This leaks the MAC address of the connected Bluetooth device.

Recommendations For Bluetooth prior to SMR Jun-2022 Release 1, update to SMR Jun-2022 Release 1 or later to resolve the issue. As a temporary workaround, consider restricting access to the sendIntentSessionError function to minimize the risk of exploitation.