CVE-2022-20133: Bluetooth App Discoverable Timeout Bypass
Summary
CVE-2022-20133: In setDiscoverableTimeout of AdapterService.java, there is a possible bypass of user interaction due to a missing permission check. Affects platform/packages/modules/Bluetooth versions >= 12L-next:0, < 12L-next:2022-06-01. Fixed in 12L-next:2022-06-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Bluetooth package in the Android ecosystem is responsible for managing Bluetooth functionality on Android devices. It provides APIs and services for Bluetooth communication, including device discovery and pairing. The vulnerability identified as CVE-2022-20133 allows an app to set the discoverable timeout of a device's Bluetooth without displaying the system dialog to the user. This vulnerability affects Android versions 10, 11, 12, and 12L.
Vulnerability Detail
The vulnerability arises from a missing permission check in the setDiscoverableTimeout function of the AdapterService.java file. This oversight enables an app to bypass user interaction and escalate privileges locally. Exploitation of this vulnerability does not require any user interaction. The impact of this vulnerability is a potential elevation of privilege, with the attacker gaining execution privileges as the user.
How To Fix
Minimum fixed version
12L-next:2022-06-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. However, users can mitigate the risk by ensuring that they have installed the latest security updates for their Android devices.
Conclusion
The CVE-2022-20133 vulnerability in the Bluetooth package of Android allows an app to bypass user interaction and set the discoverable timeout of a device's Bluetooth. This can lead to a local elevation of privilege, with the attacker gaining execution privileges. It is crucial to update the Bluetooth app to the latest version to fix this vulnerability. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for platform/packages/modules/Bluetooth →
FAQ
The vulnerability allows an app to set the discoverable timeout of a device's Bluetooth without user interaction, potentially leading to an elevation of privilege.
Android versions 10, 11, 12, and 12L are affected by this vulnerability.
No, user interaction is not needed for exploitation of this vulnerability.
To fix this vulnerability, update the Bluetooth app to the latest version available, which includes the necessary security patches.
While there are no specific workarounds mentioned, keeping the Android device up to date with the latest security updates can help mitigate the risk.
Related vulnerabilities
Recent vulnerabilities recorded for platform/packages/modules/Bluetooth.
