CVE-2021-1037 | BDVDB-2026-167779 Detail

Android

Description#

The broadcast that DevicePickerFragment sends when a new device is paired doesn't have any permission checks, so any app can register to listen for it. This lets apps keep track of what devices are paired without requesting BLUETOOTH permissions.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-162951906

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://source.android.com/security/bulletin/aaos/2022-01-01

Exploit#

No public exploit known

History#

Version 12022-01-14Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.