CVE-2016-0850
HighSummary
The PORCHE_PAIRING_CONFLICT feature in Bluetooth in Android versions before 4.4.4, 5.0.2, 5.1.1, and 6.x before April 1, 2016 allows remote attackers to bypass intended pairing restrictions via a crafted device.
Risk Assessment
Organizations may be exposed to unauthorized Bluetooth connections, potentially leading to data theft or device takeover.
Recommendation
It is recommended to update Android to the latest version to mitigate this vulnerability and to monitor Bluetooth connections for unauthorized pairing attempts.
Other vulnerabilities in Bluetooth w systemie Android
See all- CVE-2017-0781High
There is a remote code execution vulnerability in the Android system (Bluetooth). It affects versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, and 8.0.
- CVE-2016-3760High
Bluetooth in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before July 1, 2016 allows local users to gain privileges by establishing a pairing that remains present during a session of the primary user.
- CVE-2017-13160Critical
A remote code execution vulnerability exists in the Android system (bluetooth). This affects versions 7.0, 7.1.1, 7.1.2, and 8.0.
Original NVD description (English source)
The PORCHE_PAIRING_CONFLICT feature in Bluetooth in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 allows remote attackers to bypass intended pairing restrictions via a crafted device, aka internal bug 26551752.