CVE-2016-3760
HighSummary
Bluetooth in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before July 1, 2016 allows local users to gain privileges by establishing a pairing that remains present during a session of the primary user.
Risk Assessment
Organizations may be exposed to unauthorized access by local users, which could lead to privilege escalation and potential security breaches.
Recommendation
It is recommended to update Android to the latest version to mitigate this vulnerability and to monitor Bluetooth activity for unauthorized connections.
Other vulnerabilities in Bluetooth w systemie Android
See all- CVE-2017-0781High
There is a remote code execution vulnerability in the Android system (Bluetooth). It affects versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, and 8.0.
- CVE-2016-0850High
The PORCHE_PAIRING_CONFLICT feature in Bluetooth in Android versions before 4.4.4, 5.0.2, 5.1.1, and 6.x before April 1, 2016 allows remote attackers to bypass intended pairing restrictions via a crafted device.
- CVE-2017-13160Critical
A remote code execution vulnerability exists in the Android system (bluetooth). This affects versions 7.0, 7.1.1, 7.1.2, and 8.0.
Original NVD description (English source)
Bluetooth in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows local users to gain privileges by establishing a pairing that remains present during a session of the primary user, aka internal bug 27410683.