← CVE Intelligence

CVE-2024-34722

Google / Android PUBLISHED

Description (CNA)

In smp_proc_rand of smp_act.cc, there is a possible authentication bypass during legacy BLE pairing due to incorrect implementation of a protocol. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected (CNA)

Vendor / productVersions
Google / Androidaffected 14; affected 13; affected 12L; affected 12

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.