CVE-2024-34722

8.8HIGH

In smp_proc_rand of smp_act.cc, there is a possible authentication bypass during legacy BLE pairing due to incorrect implementation of a protocol. This could lead to remote escalation of privilege wit

Veröffentlicht: 7/9/2024Aktualisiert: 1/21/2025
Auf NVD ansehenAuf MITRE ansehen

Beschreibung

In smp_proc_rand of smp_act.cc, there is a possible authentication bypass during legacy BLE pairing due to incorrect implementation of a protocol. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

KI-AnalyseKI-gestützt

Betroffene Produkte

googleandroid
12.0
googleandroid
12.1
googleandroid
13.0
googleandroid
14.0

Referenzen