Detections
Analytics
CVE-2024-34722
high
Description
In smp_proc_rand of smp_act.cc, there is a possible authentication bypass during legacy BLE pairing due to incorrect implementation of a protocol. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
References
https://source.android.com/docs/security/bulletin/2024-07-01?&web_view=true
https://source.android.com/security/bulletin/2025-01-01