CVE-2021-39673
In bta_dm_remove_device of bta_dm_act.cc, there is a possible way for a BT device to receive a long term trackable identifier due to a permissions bypass. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
What each source reports
OSVASB-A-195410559 No score
In bta_dm_remove_device of bta_dm_act.cc, there is a possible way for a BT device to receive a long term trackable identifier due to a permissions bypass. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
- Record
ASB-A-195410559- Updated
- 2026-11-10
Affected packages
| Package | Affected | Fixed |
|---|---|---|
platform/packages/modules/BluetoothAndroid |
13:0 up to 13:2022-10-01, plus listed versions 13 |
13:2022-10-01 |
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | OSV | |
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-39673 is a vulnerability with no CVSS score yet in platform/packages/modules/Bluetooth, published October 1, 2022. No source lists public exploit code. Fixed in platform/packages/modules/Bluetooth 13:2022-10-01.