Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In AndroidManifest.xml of Settings, there is a possible pairing of a Bluetooth device without user's consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-194300867
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Google Android 安全漏洞
Vulnerability Description
Google Android是美国谷歌（Google）公司的一套以Linux为基础的开源操作系统。 Google Android 存在安全漏洞,该漏洞源于在设置的 AndroidManifest.xml 中，由于缺少权限检查，可能会在未经用户同意的情况下配对蓝牙设备。这可能会导致本地权限提升，而无需额外的执行权限。开发不需要用户交互。
CVSS Information
N/A
Vulnerability Type
N/A