In handleBondStateChanged of AdapterService.java, there is a possible sensitive information disclosure due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"fixes": [
"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/921aaec06df0b5974d0fbbb40443935b15019270",
"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/afca6806043387957c3730c7465f75b1ec407f63"
],
"severity": "High",
"types": [
"ID"
],
"spl": "2026-06-01",
"vanir_signatures": [
{
"target": {
"file": "android/app/src/com/android/bluetooth/btservice/AdapterService.java"
},
"deprecated": false,
"signature_type": "Line",
"id": "ASB-A-290364858-162f9859",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/921aaec06df0b5974d0fbbb40443935b15019270",
"digest": {
"threshold": 0.9,
"line_hashes": [
"305864466510637534793017076661939241314",
"24721725675103257489470149858387334317",
"122429301842912345656125589581716678867",
"39637882632034451169684967801581127109",
"29202412039906249954192024093881753390",
"88356096102476975710748304975988160523",
"21057023394588027097121282481923918046",
"20251326410565350043523602827334968240"
]
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"104864745248922639475810203119796420289",
"57191062265804137688065769567100330434",
"139015719142191469842233776694246710775",
"214489612472956584036118295522973027834",
"53716967109777148551067975742120209826"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/afca6806043387957c3730c7465f75b1ec407f63",
"signature_version": "v1",
"id": "ASB-A-290364858-c5daea1d",
"target": {
"file": "android/app/src/com/android/bluetooth/btservice/AdapterService.java"
}
},
{
"target": {
"file": "android/app/src/com/android/bluetooth/btservice/AdapterService.java",
"function": "handleBondStateChanged"
},
"deprecated": false,
"signature_type": "Function",
"id": "ASB-A-290364858-cec919c0",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/afca6806043387957c3730c7465f75b1ec407f63",
"digest": {
"length": 1144.0,
"function_hash": "265628521590673445795170880413659405486"
}
},
{
"digest": {
"length": 1583.0,
"function_hash": "258490044447819165761890927399281273261"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/921aaec06df0b5974d0fbbb40443935b15019270",
"signature_version": "v1",
"id": "ASB-A-290364858-d7dfed47",
"target": {
"file": "android/app/src/com/android/bluetooth/btservice/AdapterService.java",
"function": "handleBondStateChanged"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/9c2be9f0da10486e20658fcb68ee2669ffdfe9f4"
],
"spl": "2026-06-01",
"types": [
"ID"
],
"vanir_signatures": [
{
"target": {
"file": "android/app/src/com/android/bluetooth/btservice/AdapterService.java",
"function": "handleBondStateChanged"
},
"deprecated": false,
"signature_type": "Function",
"id": "ASB-A-290364858-c02e8fb6",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/9c2be9f0da10486e20658fcb68ee2669ffdfe9f4",
"digest": {
"length": 1583.0,
"function_hash": "158872981596593419989496199545895507206"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"14463957989382354865736227327803955519",
"170130348391427609667341272047701606877",
"29202412039906249954192024093881753390",
"88356096102476975710748304975988160523",
"21057023394588027097121282481923918046",
"20251326410565350043523602827334968240"
]
},
"deprecated": false,
"signature_type": "Line",
"id": "ASB-A-290364858-de21e132",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/9c2be9f0da10486e20658fcb68ee2669ffdfe9f4",
"target": {
"file": "android/app/src/com/android/bluetooth/btservice/AdapterService.java"
}
}
],
"severity": "High"
}{
"fixes": [
"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/f83a53408ee5055c4e0b2a0dc7692811b78be7c9"
],
"vanir_signatures": [
{
"digest": {
"length": 1583.0,
"function_hash": "258490044447819165761890927399281273261"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/f83a53408ee5055c4e0b2a0dc7692811b78be7c9",
"signature_version": "v1",
"id": "ASB-A-290364858-3eabcbc6",
"target": {
"file": "android/app/src/com/android/bluetooth/btservice/AdapterService.java",
"function": "handleBondStateChanged"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"305864466510637534793017076661939241314",
"24721725675103257489470149858387334317",
"122429301842912345656125589581716678867",
"39637882632034451169684967801581127109",
"29202412039906249954192024093881753390",
"88356096102476975710748304975988160523",
"21057023394588027097121282481923918046",
"20251326410565350043523602827334968240"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/f83a53408ee5055c4e0b2a0dc7692811b78be7c9",
"signature_version": "v1",
"id": "ASB-A-290364858-c8c3956b",
"target": {
"file": "android/app/src/com/android/bluetooth/btservice/AdapterService.java"
}
}
],
"types": [
"ID"
],
"severity": "High",
"spl": "2026-06-01"
}{
"fixes": [
"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/a8d133dacaeadf95d888a3731a17a382ebe7da2c"
],
"severity": "High",
"types": [
"ID"
],
"spl": "2026-06-01",
"vanir_signatures": [
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"336048980400195847245278063684361695640",
"130864846825537491100810612431605631637",
"211701681484863352366504953180418013750",
"214489612472956584036118295522973027834",
"53716967109777148551067975742120209826"
]
},
"deprecated": false,
"signature_type": "Line",
"id": "ASB-A-290364858-039c766b",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/a8d133dacaeadf95d888a3731a17a382ebe7da2c",
"target": {
"file": "android/app/src/com/android/bluetooth/btservice/AdapterService.java"
}
},
{
"target": {
"file": "android/app/src/com/android/bluetooth/btservice/AdapterService.java",
"function": "handleBondStateChanged"
},
"deprecated": false,
"signature_type": "Function",
"id": "ASB-A-290364858-8718ff6a",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/a8d133dacaeadf95d888a3731a17a382ebe7da2c",
"digest": {
"length": 1041.0,
"function_hash": "228747539382196669146037636699502846090"
}
}
]
}