In multiple locations, there is a possible permissions bypass due to a missing null check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
{ "vanir_signatures": [ { "digest": { "threshold": 0.9, "line_hashes": [ "122248138845173364158338689469184064049", "115280080426344608532605821564366852486", "4527088564975320286290901949988797634", "48769054478883094489978465081832506854" ] }, "id": "ASB-A-242996380-0044b700", "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/8098771bca75166d06f9591d0d2110ed089ee6a7", "deprecated": false, "signature_version": "v1", "target": { "file": "service/src/com/android/server/bluetooth/BtPermissionUtils.java" }, "signature_type": "Line" }, { "digest": { "length": 764.0, "function_hash": "325053731251367774773946610521225888811" }, "id": "ASB-A-242996380-1125acb6", "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/8098771bca75166d06f9591d0d2110ed089ee6a7", "deprecated": false, "signature_version": "v1", "target": { "file": "android/app/src/com/android/bluetooth/Utils.java", "function": "checkCallerHasCoarseOrFineLocation" }, "signature_type": "Function" }, { "digest": { "length": 513.0, "function_hash": "43031346814327410086639807534040554258" }, "id": "ASB-A-242996380-40e0cc11", "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/8098771bca75166d06f9591d0d2110ed089ee6a7", "deprecated": false, "signature_version": "v1", "target": { "file": "service/src/com/android/server/bluetooth/BtPermissionUtils.java", "function": "checkConnectPermissionForDataDelivery" }, "signature_type": "Function" }, { "digest": { "threshold": 0.9, "line_hashes": [ "3559845528284356932858728125815394430", "251892582015225518980228133292340241046", "115950149313936184813464563097545540182", "39481971499554049307985817692526468209", "277499668907462730780927512407066259045", "122173727292628039839828640301104869332", "329025984895211967708560123601523583920", "90895081775202424358169570230727151993", "278489799693465919478425761363829543181", "115950149313936184813464563097545540182", "39481971499554049307985817692526468209", "277499668907462730780927512407066259045", "122173727292628039839828640301104869332", "329025984895211967708560123601523583920", "43737027323757389847772141424596015759", "113205427596469377831492475038426002528", "71549503122960087242370922318488678954", "182220691651516949747953856729425713125", "277499668907462730780927512407066259045", "122173727292628039839828640301104869332", "329025984895211967708560123601523583920", "90895081775202424358169570230727151993", "278489799693465919478425761363829543181", "115950149313936184813464563097545540182", "39481971499554049307985817692526468209", "277499668907462730780927512407066259045", "122173727292628039839828640301104869332", "329025984895211967708560123601523583920" ] }, "id": "ASB-A-242996380-48ef3fb4", "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/8098771bca75166d06f9591d0d2110ed089ee6a7", "deprecated": false, "signature_version": "v1", "target": { "file": "android/app/src/com/android/bluetooth/Utils.java" }, "signature_type": "Line" }, { "digest": { "length": 613.0, "function_hash": "145753260341764555588092342114265922145" }, "id": "ASB-A-242996380-4a4cda35", "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/8098771bca75166d06f9591d0d2110ed089ee6a7", "deprecated": false, "signature_version": "v1", "target": { "file": "android/app/src/com/android/bluetooth/Utils.java", "function": "checkCallerHasCoarseLocation" }, "signature_type": "Function" }, { "digest": { "length": 611.0, "function_hash": "78047888903892636346335955261140448755" }, "id": "ASB-A-242996380-6901026e", "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/8098771bca75166d06f9591d0d2110ed089ee6a7", "deprecated": false, "signature_version": "v1", "target": { "file": "android/app/src/com/android/bluetooth/Utils.java", "function": "checkPermissionForDataDelivery" }, "signature_type": "Function" }, { "digest": { "length": 609.0, "function_hash": "95107684738866635415669742251062177831" }, "id": "ASB-A-242996380-aba4706d", "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/8098771bca75166d06f9591d0d2110ed089ee6a7", "deprecated": false, "signature_version": "v1", "target": { "file": "android/app/src/com/android/bluetooth/Utils.java", "function": "checkCallerHasFineLocation" }, "signature_type": "Function" } ], "fixes": [ "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/8098771bca75166d06f9591d0d2110ed089ee6a7" ], "spl": "2024-11-01", "severity": "High", "types": [ "EoP" ] }
{ "vanir_signatures": [ { "digest": { "length": 613.0, "function_hash": "145753260341764555588092342114265922145" }, "id": "ASB-A-242996380-31b1067b", "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ed63d97fd6537f539fdde1413bff86a30f80a7b5", "deprecated": false, "signature_version": "v1", "target": { "file": "android/app/src/com/android/bluetooth/Utils.java", "function": "checkCallerHasCoarseLocation" }, "signature_type": "Function" }, { "digest": { "length": 573.0, "function_hash": "181926525783090843270414963644699375377" }, "id": "ASB-A-242996380-984065a3", "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ed63d97fd6537f539fdde1413bff86a30f80a7b5", "deprecated": false, "signature_version": "v1", "target": { "file": "android/app/src/com/android/bluetooth/Utils.java", "function": "checkPermissionForDataDelivery" }, "signature_type": "Function" }, { "digest": { "threshold": 0.9, "line_hashes": [ "135970589537739589450548244403803791875", "203356055920711273115487538299629850662", "98636266586099966727921275738185121656", "39481971499554049307985817692526468209", "277499668907462730780927512407066259045", "122173727292628039839828640301104869332", "329025984895211967708560123601523583920", "90895081775202424358169570230727151993", "278489799693465919478425761363829543181", "115950149313936184813464563097545540182", "39481971499554049307985817692526468209", "277499668907462730780927512407066259045", "122173727292628039839828640301104869332", "329025984895211967708560123601523583920", "43737027323757389847772141424596015759", "113205427596469377831492475038426002528", "71549503122960087242370922318488678954", "182220691651516949747953856729425713125", "277499668907462730780927512407066259045", "122173727292628039839828640301104869332", "329025984895211967708560123601523583920", "90895081775202424358169570230727151993", "278489799693465919478425761363829543181", "115950149313936184813464563097545540182", "39481971499554049307985817692526468209", "277499668907462730780927512407066259045", "122173727292628039839828640301104869332", "329025984895211967708560123601523583920" ] }, "id": "ASB-A-242996380-f42a579b", "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ed63d97fd6537f539fdde1413bff86a30f80a7b5", "deprecated": false, "signature_version": "v1", "target": { "file": "android/app/src/com/android/bluetooth/Utils.java" }, "signature_type": "Line" }, { "digest": { "length": 609.0, "function_hash": "95107684738866635415669742251062177831" }, "id": "ASB-A-242996380-f9a4981c", "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ed63d97fd6537f539fdde1413bff86a30f80a7b5", "deprecated": false, "signature_version": "v1", "target": { "file": "android/app/src/com/android/bluetooth/Utils.java", "function": "checkCallerHasFineLocation" }, "signature_type": "Function" }, { "digest": { "length": 764.0, "function_hash": "325053731251367774773946610521225888811" }, "id": "ASB-A-242996380-f9e3a15a", "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ed63d97fd6537f539fdde1413bff86a30f80a7b5", "deprecated": false, "signature_version": "v1", "target": { "file": "android/app/src/com/android/bluetooth/Utils.java", "function": "checkCallerHasCoarseOrFineLocation" }, "signature_type": "Function" } ], "fixes": [ "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ed63d97fd6537f539fdde1413bff86a30f80a7b5" ], "spl": "2024-11-01", "severity": "High", "types": [ "EoP" ] }
{ "vanir_signatures": [ { "digest": { "length": 764.0, "function_hash": "325053731251367774773946610521225888811" }, "id": "ASB-A-242996380-0c397d6f", "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5fe72f931db2898eb51a44e3b1b424c6370e8ad8", "deprecated": false, "signature_version": "v1", "target": { "file": "android/app/src/com/android/bluetooth/Utils.java", "function": "checkCallerHasCoarseOrFineLocation" }, "signature_type": "Function" }, { "digest": { "length": 611.0, "function_hash": "78047888903892636346335955261140448755" }, "id": "ASB-A-242996380-5233a437", "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5fe72f931db2898eb51a44e3b1b424c6370e8ad8", "deprecated": false, "signature_version": "v1", "target": { "file": "android/app/src/com/android/bluetooth/Utils.java", "function": "checkPermissionForDataDelivery" }, "signature_type": "Function" }, { "digest": { "threshold": 0.9, "line_hashes": [ "3559845528284356932858728125815394430", "251892582015225518980228133292340241046", "115950149313936184813464563097545540182", "39481971499554049307985817692526468209", "277499668907462730780927512407066259045", "122173727292628039839828640301104869332", "329025984895211967708560123601523583920", "90895081775202424358169570230727151993", "278489799693465919478425761363829543181", "115950149313936184813464563097545540182", "39481971499554049307985817692526468209", "277499668907462730780927512407066259045", "122173727292628039839828640301104869332", "329025984895211967708560123601523583920", "43737027323757389847772141424596015759", "113205427596469377831492475038426002528", "71549503122960087242370922318488678954", "182220691651516949747953856729425713125", "277499668907462730780927512407066259045", "122173727292628039839828640301104869332", "329025984895211967708560123601523583920", "90895081775202424358169570230727151993", "278489799693465919478425761363829543181", "115950149313936184813464563097545540182", "39481971499554049307985817692526468209", "277499668907462730780927512407066259045", "122173727292628039839828640301104869332", "329025984895211967708560123601523583920" ] }, "id": "ASB-A-242996380-591a315e", "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5fe72f931db2898eb51a44e3b1b424c6370e8ad8", "deprecated": false, "signature_version": "v1", "target": { "file": "android/app/src/com/android/bluetooth/Utils.java" }, "signature_type": "Line" }, { "digest": { "length": 609.0, "function_hash": "95107684738866635415669742251062177831" }, "id": "ASB-A-242996380-ce82a793", "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5fe72f931db2898eb51a44e3b1b424c6370e8ad8", "deprecated": false, "signature_version": "v1", "target": { "file": "android/app/src/com/android/bluetooth/Utils.java", "function": "checkCallerHasFineLocation" }, "signature_type": "Function" }, { "digest": { "length": 613.0, "function_hash": "145753260341764555588092342114265922145" }, "id": "ASB-A-242996380-ff805a71", "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5fe72f931db2898eb51a44e3b1b424c6370e8ad8", "deprecated": false, "signature_version": "v1", "target": { "file": "android/app/src/com/android/bluetooth/Utils.java", "function": "checkCallerHasCoarseLocation" }, "signature_type": "Function" } ], "fixes": [ "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5fe72f931db2898eb51a44e3b1b424c6370e8ad8" ], "spl": "2024-11-01", "severity": "High", "types": [ "EoP" ] }