ASB-A-251514170

vendorUSosv

view advisory published 2025-01-01Licence: per source

In smp_proc_rand of smp_act.cc, there is a possible authentication bypass during legacy BLE pairing due to incorrect implementation of a protocol. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2024-34722US	high8.8	0.25% (17th)	—	2024-07-09
In smp_proc_rand of smp_act.cc, there is a possible authentication bypass during legacy BLE pairing due to incorrect implementation of a protocol. This could lead to remote escalat…

references

External citations — patches, advisories, analysis.

https://android.googlesource.com/platform/packages/modules/Bluetooth/+/317b4e293cefe18fe8c58c1de0c4a6741bd05629FIX
https://android.googlesource.com/platform/packages/modules/Bluetooth/+/6ad3d749f7f632787f29710ce23736e10d2969bfFIX
https://source.android.com/security/bulletin/2025-01-01ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan