Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-x34f-9f72-pq82

Опубликовано: 04 сент. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 5.7

Описание

In generateRandomPassword of LocalBluetoothLeBroadcast.java, there is a possible way to intercept the Auracast audio stream due to an insecure default value. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

In generateRandomPassword of LocalBluetoothLeBroadcast.java, there is a possible way to intercept the Auracast audio stream due to an insecure default value. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

EPSS

Процентиль: 1%
0.00008
Низкий

5.7 Medium

CVSS3

Дефекты

CWE-1188

Связанные уязвимости

CVSS3: 5.7
nvd
5 месяцев назад

In generateRandomPassword of LocalBluetoothLeBroadcast.java, there is a possible way to intercept the Auracast audio stream due to an insecure default value. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CVSS3: 5.7
fstec
5 месяцев назад

Уязвимость функции generateRandomPassword() модуля LocalBluetoothLeBroadcast.java операционных систем Android, позволяющая нарушителю раскрыть защищаемую информацию

EPSS

Процентиль: 1%
0.00008
Низкий

5.7 Medium

CVSS3

Дефекты

CWE-1188