Skip to content
OpenAdvisories
High · 7.8 CVE-2026-0045 EUVD-2026-33776GHSA-8qpr-7jp9-rxm6

In bta_jv_rfcomm_connect of bta_jv_act.cc, there is a possible bypass of bonding for a secure connection due to a logic error in the code. …

Published Jun 1, 2026 · Updated Jun 3, 2026 · Assigned by google_android

Description

In bta_jv_rfcomm_connect of bta_jv_act.cc, there is a possible bypass of bonding for a secure connection due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android 16-qpr2, 16, 15, 14 —

Advisories 2

References