Exploiting BLURtooth [CVE-2020-15802] on a Pixel 6

2022-08-0100:00:00

Google

osv.dev

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.6%

JSON

In btif_dm_auth_cmpl_evt of btif_dm.cc, there is a possible vulnerability in Cross-Transport Key Derivation due to Weakness in Bluetooth Standard. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CPENameOperatorVersion
platform/packages/modules/bluetootheq11
platform/packages/modules/bluetootheq12
platform/system/bteq11
platform/packages/modules/bluetootheq10
platform/system/bteq12L
platform/system/bteq12
platform/system/bteq10
platform/packages/modules/bluetootheq12L

Name	Operator	Version
platform/packages/modules/bluetooth	eq	11
platform/packages/modules/bluetooth	eq	12
platform/system/bt	eq	11
platform/packages/modules/bluetooth	eq	10
platform/system/bt	eq	12L
platform/system/bt	eq	12
platform/system/bt	eq	10
platform/packages/modules/bluetooth	eq	12L