CVE-2022-33723CWE-1021

A vulnerable code in onCreate of BluetoothScanDialog prior to SMR Aug-2022 Release 1, allows attackers to trick the user to select an unwanted bluetooth device…

Medium · published August 5, 2022

CVSS v3.1
4.8
EPSS
0%
Percentile
4.3
In the wild
Unconfirmed
What it is

A vulnerable code in onCreate of BluetoothScanDialog prior to SMR Aug-2022 Release 1, allows attackers to trick the user to select an unwanted bluetooth device via tapjacking/overlay attack.

The record
Technical detail
CVSS v3.1
4.8 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00155 · 4.3th percentile
Weakness
CWE-1021 · Improper Restriction of Rendered UI Layers or Frames
Published
2022-08-05T15:13Z
EPSS history
Timeline
  • 05 AUG 15:13Z
    A vulnerable code in onCreate of BluetoothScanDialog prior to SMR Aug-2022 Release 1, allows attackers to trick the user to select an unwanted bluetooth device…
    cvelistv5