In multiple locations, there is a possible permissions bypass due to a missing null check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"fixes": [
"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/8098771bca75166d06f9591d0d2110ed089ee6a7"
],
"vanir_signatures": [
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/8098771bca75166d06f9591d0d2110ed089ee6a7",
"deprecated": false,
"digest": {
"line_hashes": [
"122248138845173364158338689469184064049",
"115280080426344608532605821564366852486",
"4527088564975320286290901949988797634",
"48769054478883094489978465081832506854"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "ASB-A-242996380-0044b700",
"target": {
"file": "service/src/com/android/server/bluetooth/BtPermissionUtils.java"
}
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/8098771bca75166d06f9591d0d2110ed089ee6a7",
"deprecated": false,
"digest": {
"length": 764.0,
"function_hash": "325053731251367774773946610521225888811"
},
"signature_type": "Function",
"id": "ASB-A-242996380-1125acb6",
"target": {
"function": "checkCallerHasCoarseOrFineLocation",
"file": "android/app/src/com/android/bluetooth/Utils.java"
}
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/8098771bca75166d06f9591d0d2110ed089ee6a7",
"deprecated": false,
"digest": {
"length": 513.0,
"function_hash": "43031346814327410086639807534040554258"
},
"signature_type": "Function",
"id": "ASB-A-242996380-40e0cc11",
"target": {
"function": "checkConnectPermissionForDataDelivery",
"file": "service/src/com/android/server/bluetooth/BtPermissionUtils.java"
}
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/8098771bca75166d06f9591d0d2110ed089ee6a7",
"deprecated": false,
"digest": {
"line_hashes": [
"3559845528284356932858728125815394430",
"251892582015225518980228133292340241046",
"115950149313936184813464563097545540182",
"39481971499554049307985817692526468209",
"277499668907462730780927512407066259045",
"122173727292628039839828640301104869332",
"329025984895211967708560123601523583920",
"90895081775202424358169570230727151993",
"278489799693465919478425761363829543181",
"115950149313936184813464563097545540182",
"39481971499554049307985817692526468209",
"277499668907462730780927512407066259045",
"122173727292628039839828640301104869332",
"329025984895211967708560123601523583920",
"43737027323757389847772141424596015759",
"113205427596469377831492475038426002528",
"71549503122960087242370922318488678954",
"182220691651516949747953856729425713125",
"277499668907462730780927512407066259045",
"122173727292628039839828640301104869332",
"329025984895211967708560123601523583920",
"90895081775202424358169570230727151993",
"278489799693465919478425761363829543181",
"115950149313936184813464563097545540182",
"39481971499554049307985817692526468209",
"277499668907462730780927512407066259045",
"122173727292628039839828640301104869332",
"329025984895211967708560123601523583920"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "ASB-A-242996380-48ef3fb4",
"target": {
"file": "android/app/src/com/android/bluetooth/Utils.java"
}
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/8098771bca75166d06f9591d0d2110ed089ee6a7",
"deprecated": false,
"digest": {
"length": 613.0,
"function_hash": "145753260341764555588092342114265922145"
},
"signature_type": "Function",
"id": "ASB-A-242996380-4a4cda35",
"target": {
"function": "checkCallerHasCoarseLocation",
"file": "android/app/src/com/android/bluetooth/Utils.java"
}
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/8098771bca75166d06f9591d0d2110ed089ee6a7",
"deprecated": false,
"digest": {
"length": 611.0,
"function_hash": "78047888903892636346335955261140448755"
},
"signature_type": "Function",
"id": "ASB-A-242996380-6901026e",
"target": {
"function": "checkPermissionForDataDelivery",
"file": "android/app/src/com/android/bluetooth/Utils.java"
}
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/8098771bca75166d06f9591d0d2110ed089ee6a7",
"deprecated": false,
"digest": {
"length": 609.0,
"function_hash": "95107684738866635415669742251062177831"
},
"signature_type": "Function",
"id": "ASB-A-242996380-aba4706d",
"target": {
"function": "checkCallerHasFineLocation",
"file": "android/app/src/com/android/bluetooth/Utils.java"
}
}
],
"types": [
"EoP"
],
"severity": "High",
"spl": "2024-11-01"
}{
"fixes": [
"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ed63d97fd6537f539fdde1413bff86a30f80a7b5"
],
"vanir_signatures": [
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ed63d97fd6537f539fdde1413bff86a30f80a7b5",
"deprecated": false,
"digest": {
"length": 613.0,
"function_hash": "145753260341764555588092342114265922145"
},
"signature_type": "Function",
"id": "ASB-A-242996380-31b1067b",
"target": {
"function": "checkCallerHasCoarseLocation",
"file": "android/app/src/com/android/bluetooth/Utils.java"
}
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ed63d97fd6537f539fdde1413bff86a30f80a7b5",
"deprecated": false,
"digest": {
"length": 573.0,
"function_hash": "181926525783090843270414963644699375377"
},
"signature_type": "Function",
"id": "ASB-A-242996380-984065a3",
"target": {
"function": "checkPermissionForDataDelivery",
"file": "android/app/src/com/android/bluetooth/Utils.java"
}
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ed63d97fd6537f539fdde1413bff86a30f80a7b5",
"deprecated": false,
"digest": {
"line_hashes": [
"135970589537739589450548244403803791875",
"203356055920711273115487538299629850662",
"98636266586099966727921275738185121656",
"39481971499554049307985817692526468209",
"277499668907462730780927512407066259045",
"122173727292628039839828640301104869332",
"329025984895211967708560123601523583920",
"90895081775202424358169570230727151993",
"278489799693465919478425761363829543181",
"115950149313936184813464563097545540182",
"39481971499554049307985817692526468209",
"277499668907462730780927512407066259045",
"122173727292628039839828640301104869332",
"329025984895211967708560123601523583920",
"43737027323757389847772141424596015759",
"113205427596469377831492475038426002528",
"71549503122960087242370922318488678954",
"182220691651516949747953856729425713125",
"277499668907462730780927512407066259045",
"122173727292628039839828640301104869332",
"329025984895211967708560123601523583920",
"90895081775202424358169570230727151993",
"278489799693465919478425761363829543181",
"115950149313936184813464563097545540182",
"39481971499554049307985817692526468209",
"277499668907462730780927512407066259045",
"122173727292628039839828640301104869332",
"329025984895211967708560123601523583920"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "ASB-A-242996380-f42a579b",
"target": {
"file": "android/app/src/com/android/bluetooth/Utils.java"
}
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ed63d97fd6537f539fdde1413bff86a30f80a7b5",
"deprecated": false,
"digest": {
"length": 609.0,
"function_hash": "95107684738866635415669742251062177831"
},
"signature_type": "Function",
"id": "ASB-A-242996380-f9a4981c",
"target": {
"function": "checkCallerHasFineLocation",
"file": "android/app/src/com/android/bluetooth/Utils.java"
}
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ed63d97fd6537f539fdde1413bff86a30f80a7b5",
"deprecated": false,
"digest": {
"length": 764.0,
"function_hash": "325053731251367774773946610521225888811"
},
"signature_type": "Function",
"id": "ASB-A-242996380-f9e3a15a",
"target": {
"function": "checkCallerHasCoarseOrFineLocation",
"file": "android/app/src/com/android/bluetooth/Utils.java"
}
}
],
"types": [
"EoP"
],
"severity": "High",
"spl": "2024-11-01"
}{
"fixes": [
"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5fe72f931db2898eb51a44e3b1b424c6370e8ad8"
],
"vanir_signatures": [
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5fe72f931db2898eb51a44e3b1b424c6370e8ad8",
"deprecated": false,
"digest": {
"length": 764.0,
"function_hash": "325053731251367774773946610521225888811"
},
"signature_type": "Function",
"id": "ASB-A-242996380-0c397d6f",
"target": {
"function": "checkCallerHasCoarseOrFineLocation",
"file": "android/app/src/com/android/bluetooth/Utils.java"
}
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5fe72f931db2898eb51a44e3b1b424c6370e8ad8",
"deprecated": false,
"digest": {
"length": 611.0,
"function_hash": "78047888903892636346335955261140448755"
},
"signature_type": "Function",
"id": "ASB-A-242996380-5233a437",
"target": {
"function": "checkPermissionForDataDelivery",
"file": "android/app/src/com/android/bluetooth/Utils.java"
}
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5fe72f931db2898eb51a44e3b1b424c6370e8ad8",
"deprecated": false,
"digest": {
"line_hashes": [
"3559845528284356932858728125815394430",
"251892582015225518980228133292340241046",
"115950149313936184813464563097545540182",
"39481971499554049307985817692526468209",
"277499668907462730780927512407066259045",
"122173727292628039839828640301104869332",
"329025984895211967708560123601523583920",
"90895081775202424358169570230727151993",
"278489799693465919478425761363829543181",
"115950149313936184813464563097545540182",
"39481971499554049307985817692526468209",
"277499668907462730780927512407066259045",
"122173727292628039839828640301104869332",
"329025984895211967708560123601523583920",
"43737027323757389847772141424596015759",
"113205427596469377831492475038426002528",
"71549503122960087242370922318488678954",
"182220691651516949747953856729425713125",
"277499668907462730780927512407066259045",
"122173727292628039839828640301104869332",
"329025984895211967708560123601523583920",
"90895081775202424358169570230727151993",
"278489799693465919478425761363829543181",
"115950149313936184813464563097545540182",
"39481971499554049307985817692526468209",
"277499668907462730780927512407066259045",
"122173727292628039839828640301104869332",
"329025984895211967708560123601523583920"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "ASB-A-242996380-591a315e",
"target": {
"file": "android/app/src/com/android/bluetooth/Utils.java"
}
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5fe72f931db2898eb51a44e3b1b424c6370e8ad8",
"deprecated": false,
"digest": {
"length": 609.0,
"function_hash": "95107684738866635415669742251062177831"
},
"signature_type": "Function",
"id": "ASB-A-242996380-ce82a793",
"target": {
"function": "checkCallerHasFineLocation",
"file": "android/app/src/com/android/bluetooth/Utils.java"
}
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5fe72f931db2898eb51a44e3b1b424c6370e8ad8",
"deprecated": false,
"digest": {
"length": 613.0,
"function_hash": "145753260341764555588092342114265922145"
},
"signature_type": "Function",
"id": "ASB-A-242996380-ff805a71",
"target": {
"function": "checkCallerHasCoarseLocation",
"file": "android/app/src/com/android/bluetooth/Utils.java"
}
}
],
"types": [
"EoP"
],
"severity": "High",
"spl": "2024-11-01"
}