Description
In onAttach of ConnectedDeviceDashboardFragment.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege in Bluetooth settings with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-194695497
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Android | Android-10 Android-11 Android-12 Android-9 | — |
Advisories 2
- ICSA-24-074-07 Siemens SIMATIC CISA ICS & IT advisories · Mar 14, 2024
- SSA-770721 SSA-770721: Multiple Vulnerabilities in SIMATIC RF160B before V2.2 Siemens ProductCERT · Mar 12, 2024