In handleBondStateChanged of AdapterService.java, there is a possible permission bypass due to misleading or insufficient UI. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.5 | CVE-2025-0092 |
Exploitation
To exploit this vulnerability, an attacker would need to trick a user into interacting with a misleading UI element that allows for the bypass of permissions. This could potentially lead to the disclosure of sensitive information from the device without requiring elevated privileges.
Affected Products
- Bluetooth Adapter Service: Vulnerable to permission bypass due to UI issues.
Mitigation
To mitigate this vulnerability, it is recommended to ensure that the UI elements accurately reflect the permissions required for actions and to implement additional checks to prevent unauthorized access to sensitive information.