CVE-2022-20361: BLURtooth Vulnerability in Android Bluetooth
Summary
CVE-2022-20361: In btif_dm_auth_cmpl_evt of btif_dm.cc, there is a possible vulnerability in Cross-Transport Key Derivation due to Weakness in Bluetooth Standard. Affects platform/system/bt across 3 version ranges.
>= 10:0, < 10:2022-08-01
>= 11:0, < 11:2022-08-01
>= 12:0, < 12:2022-08-01
Fixed in 10:2022-08-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Bluetooth package in the Android platform is responsible for managing Bluetooth functionality on Android devices. It provides APIs and services for Bluetooth communication, pairing, and authentication. The package is an integral part of the Android operating system and is present in multiple versions, including Android 10, 11, 12, and 12L.
Vulnerability Detail
The vulnerability, known as BLURtooth (CVE-2022-20361), affects the Cross-Transport Key Derivation mechanism in the Bluetooth standard. This weakness allows an attacker to exploit the vulnerability remotely, leading to an escalation of privilege without requiring additional execution privileges. The vulnerability exists in the btif_dm_auth_cmpl_evt function of the btif_dm.cc file. It is important to note that user interaction is not necessary for the successful exploitation of this vulnerability.
How To Fix
Minimum fixed version
10:2022-08-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No workaround has been provided for this vulnerability.
Conclusion
The BLURtooth vulnerability (CVE-2022-20361) in the Android Bluetooth package poses a significant risk of privilege escalation. It is crucial to update the affected packages to versions that include the provided fixes. Failure to do so may result in unauthorized access to sensitive information or control over the affected device. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for platform/system/bt →
FAQ
The vulnerability allows an attacker to remotely escalate privileges without requiring additional execution privileges. This can potentially lead to unauthorized access to sensitive information or control over the affected device.
The vulnerability affects Android versions 10, 11, 12, and 12L.
No, user interaction is not needed for the successful exploitation of this vulnerability.
There are no known instances of this vulnerability being exploited in the wild at the time of this report.
Cross-Transport Key Derivation is a mechanism in the Bluetooth standard that allows the derivation of encryption keys for different Bluetooth transports, such as BR/EDR and LE. This vulnerability affects the implementation of this mechanism in the Android Bluetooth package.
Related vulnerabilities
Recent vulnerabilities recorded for platform/system/bt.
