CVE-2026-0050
LowCVSS 3.3Exploitation Probability (EPSS)
Low risk0th percentile - higher than 0% of all known CVEs
Summary
In handleBondStateChanged of AdapterService.java, there is a possible sensitive information disclosure due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Risk Assessment
A local attacker could access sensitive information related to Bluetooth pairing, potentially leading to data leakage.
Recommendation
Apply the system patch that fixes the permission control in AdapterService.java.
Original NVD description (English source)
In handleBondStateChanged of AdapterService.java, there is a possible sensitive information disclosure due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.