CVE-2024-34722

8.8HIGH

In smp_proc_rand of smp_act.cc, there is a possible authentication bypass during legacy BLE pairing due to incorrect implementation of a protocol. This could lead to remote escalation of privilege wit

Опубликовано: 7/9/2024Обновлено: 1/21/2025
Посмотреть на NVDПосмотреть на MITRE

Описание

In smp_proc_rand of smp_act.cc, there is a possible authentication bypass during legacy BLE pairing due to incorrect implementation of a protocol. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

ИИ-АнализНа базе ИИ

Затронутые продукты

googleandroid
12.0
googleandroid
12.1
googleandroid
13.0
googleandroid
14.0

Ссылки