CVE Database
/

CVE-2021-1017

Back to search

CVE-2021-1017

Published: Dec 15, 2021

Modified: Aug 3, 2024

PUBLISHED

Description

In AdapterService and GattService definition of AndroidManifest.xml, there is a possible way to disable bluetooth connection due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-182583850

VendorProductVersions

n/a

Android

affected
Android-12

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now