cbcvebase.
CVE-2024-0028
published 2025-09-05

CVE-2024-0028: In Audio Service, there is a possible way to obtain MAC addresses of nearby Bluetooth devices due to a missing permission check. This could lead to local…

medium5.5CVSS 3.1
AVLACLPRLUINSUCHINAN
In Audio Service, there is a possible way to obtain MAC addresses of nearby Bluetooth devices due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected

2 ranges
VendorProductVersion rangeFixed in
googleandroid——
googleandroid——