Skip to content
OpenAdvisories
High · 7.4 CVE-2024-34722 EUVD-2024-35167GHSA-4wf4-9rp2-2vhg

In smp_proc_rand of smp_act.cc, there is a possible authentication bypass during legacy BLE pairing due to incorrect implementation of a pr…

Published Jul 9, 2024 · Updated Jan 21, 2025 · Assigned by google_android

Vendor: Google Product: Android Platform: Android

Description

In smp_proc_rand of smp_act.cc, there is a possible authentication bypass during legacy BLE pairing due to incorrect implementation of a protocol. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android 14, 13, 12L, 12 —

Advisories 5

References