CVE-2023-21115

In btm_sec_encrypt_change of btm_sec.cc, there is a possible way to downgrade the link key type due to improperly used crypto

published June 15, 2023

CVSS
—
EPSS
0%
Percentile
1.0
In the wild
Unconfirmed
What it is

In btm_sec_encrypt_change of btm_sec.cc, there is a possible way to downgrade the link key type due to improperly used crypto. This could lead to paired device escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12LAndroid ID: A-258834033

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00105 · 1.0th percentile
Published
2023-06-15T00:00Z
EPSS history
Timeline
  • 15 JUN 00:00Z
    In btm_sec_encrypt_change of btm_sec.cc, there is a possible way to downgrade the link key type due to improperly used crypto
    cvelistv5