CVSS 9.8 (critical) · published 2026-09-08
In handleBondStateChanged of AdapterService.java, there is a possible way to skip pairing due to a logic error in the code. This could lead to remote escalation of privilege without user consent with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products (NVD): google android
Weakness: CWE-287
Source: NVD CVE-2026-28606
Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.