ASB-A-251514170

vendorUSosv

Advisory ansehen veröffentlicht 2025-01-01Lizenz: per source

In smp_proc_rand of smp_act.cc, there is a possible authentication bypass during legacy BLE pairing due to incorrect implementation of a protocol. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

beschreibt (1)

Zugehörige CVEs.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2024-34722US	high8.8	0.25% (17th)	—	2024-07-09
In smp_proc_rand of smp_act.cc, there is a possible authentication bypass during legacy BLE pairing due to incorrect implementation of a protocol. This could lead to remote escalat…

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

https://android.googlesource.com/platform/packages/modules/Bluetooth/+/317b4e293cefe18fe8c58c1de0c4a6741bd05629FIX
https://android.googlesource.com/platform/packages/modules/Bluetooth/+/6ad3d749f7f632787f29710ce23736e10d2969bfFIX
https://source.android.com/security/bulletin/2025-01-01ADVISORY

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan