Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fc93-89fq-8669

Опубликовано: 15 янв. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

The broadcast that DevicePickerFragment sends when a new device is paired doesn't have any permission checks, so any app can register to listen for it. This lets apps keep track of what devices are paired without requesting BLUETOOTH permissions.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-162951906

The broadcast that DevicePickerFragment sends when a new device is paired doesn't have any permission checks, so any app can register to listen for it. This lets apps keep track of what devices are paired without requesting BLUETOOTH permissions.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-162951906

EPSS

Процентиль: 20%
0.00064
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-668

Связанные уязвимости

CVSS3: 5.3
nvd
около 4 лет назад

The broadcast that DevicePickerFragment sends when a new device is paired doesn't have any permission checks, so any app can register to listen for it. This lets apps keep track of what devices are paired without requesting BLUETOOTH permissions.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-162951906

EPSS

Процентиль: 20%
0.00064
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-668