Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The broadcast that DevicePickerFragment sends when a new device is paired doesn't have any permission checks, so any app can register to listen for it. This lets apps keep track of what devices are paired without requesting BLUETOOTH permissions.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-162951906
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Google Android Automotive OS安全漏洞
Vulnerability Description
Google Android Automotive OS是美国谷歌（Google）公司的一种直接在车载硬件上运行的操作系统和平台。 Google Android Automotive OS中存在安全漏洞，该漏洞源于DevicePickerFragment 在新设备配对时发送的广播没有任何权限检查，因此任何应用程序都可以注册以监听它。这使应用程序可以跟踪哪些设备已配对，而无需请求蓝牙权限。
CVSS Information
N/A
Vulnerability Type
N/A