CVE-2024-23717: Unauthenticated Bluetooth keystroke-injection in Pixel 7
Summary
CVE-2024-23717: In access_secure_service_from_temp_bond of btm_sec.cc, there is a possible way to achieve keystroke injection due to improper input validation. Affects platform/packages/modules/Bluetooth across 3 version ranges.
>= 13:0, < 13:2024-03-01
>= 14:0, < 14:2024-03-01
>= 14-next:0, < 14-next:2024-03-01
Fixed in 14-next:2024-03-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Bluetooth package in the Android ecosystem is responsible for managing Bluetooth functionality on Android devices. It provides APIs and services for Bluetooth communication, including pairing, connecting, and exchanging data between devices. The vulnerability affects the Bluetooth module in the platform/packages/modules/Bluetooth package. This package is a critical component of the Android operating system and is present in versions 12, 12L, 13, and 14. The vulnerability allows for unauthenticated keystroke injection, potentially leading to remote escalation of privilege without requiring additional execution privileges. Exploitation of this vulnerability does not require user interaction.
Vulnerability Detail
The vulnerability exists in the access_secure_service_from_temp_bond function of btm_sec.cc file. The issue arises due to improper input validation. An attacker can exploit this vulnerability to inject keystrokes remotely when the target device is in proximity. By injecting keystrokes, an attacker can potentially perform unauthorized actions or gain elevated privileges on the affected device. The vulnerability has been assigned a severity rating of Critical.
How To Fix
Minimum fixed version
14-next:2024-03-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The unauthenticated Bluetooth keystroke-injection vulnerability in the Pixel 7 running AP11.231117.006 can lead to remote escalation of privilege. It is crucial to apply the provided fix from the AOSP repository and keep the Android operating system up to date with the latest security patches. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for platform/packages/modules/Bluetooth →
FAQ
The vulnerability allows for unauthenticated keystroke injection, which can lead to remote escalation of privilege on the affected device. An attacker can potentially perform unauthorized actions or gain elevated privileges.
No, user interaction is not needed for exploitation of this vulnerability.
The vulnerability affects Android versions 12, 12L, 13, and 14.
The vulnerability has been assigned a severity rating of Critical.
Applying the provided fix from the Android Open Source Project (AOSP) repository is the recommended mitigation for this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for platform/packages/modules/Bluetooth.
