CVE-2021-39673 — Sensitive Information Exposure in Packages Modules Bluetooth

2 documents2 sources
Severity
—N/A
No vector
EPSS
No EPSS data
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Platform Packages Modules Bluetooth
Timeline
PublishedOct 1

Description

In bta_dm_remove_device of bta_dm_act.cc, there is a possible way for a BT device to receive a long term trackable identifier due to a permissions bypass. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Packages1 packages

▶Androidplatform/packages_modules_bluetooth13:0 — 13:2022-10-01

🔴Vulnerability Details

1
OSV
CVE-2021-39673: In bta_dm_remove_device of bta_dm_act↗2022-10-01
▶

📋Vendor Advisories

1
Android
CVE-2021-39673: Android Security Bulletin 2022-10-01 CVE: CVE-2021-39673 Severity: HIGH Type: ID Affected AOSP versions: 13 References: A-195410559 [2]↗2022-10-01
▶
CVE-2021-39673 — Sensitive Information Exposure | cvebase