First published: Fri Jan 07 2022(Updated: )
Keeping sensitive data in unprotected BluetoothSettingsProvider prior to SMR Jan-2022 Release 1 allows untrusted applications to get a local Bluetooth MAC address.
Credit: mobile.security@samsung.com mobile.security@samsung.com
Affected Software | Affected Version | How to fix |
---|---|---|
Google Android | =9.0 | |
Google Android | =10.0 | |
Google Android | =11.0 | |
=9.0 | ||
=10.0 | ||
=11.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2022-22269 has a critical severity rating due to the potential exposure of sensitive data to untrusted applications.
To fix CVE-2022-22269, update your Android device to the latest security patch released after January 2022.
CVE-2022-22269 affects Android versions 9.0, 10.0, and 11.0.
CVE-2022-22269 exposes the local Bluetooth MAC address, which can be exploited by untrusted applications.
There are no specific workarounds for CVE-2022-22269; applying the security update is the recommended solution.