CyberRota Analysis
AI-GeneratedA vulnerability in the Java implementation of BleRssiRangingCapabilities.java allows unauthorized access to the Bluetooth MAC address due to a missing permission check. This local information disclosure can occur without requiring additional execution privileges or user interaction, making it a potential risk for applications that handle sensitive Bluetooth data. Developers and security teams working with Java-based applications that utilize Bluetooth functionality should prioritize addressing this issue to mitigate potential data exposure.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
In writeToParcel of BleRssiRangingCapabilities.java, there is a possible way to obtain the Bluetooth MAC address due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.