Bluetooth Low Energy Vulnerability in Android Devices by Google

CVE-2019-2102

What is CVE-2019-2102?

A Bluetooth Low Energy (BLE) vulnerability exists whereby an example Long Term Key (LTK) provided in the specification can be misused. If a BLE device inadvertently employs this hardcoded LTK, an attacker within proximity can exploit this weakness to inject keystrokes on a connected Android device without requiring user interaction. This not only compromises the confidentiality of data but also raises significant concerns over the integrity of operations conducted on the device. Users of the affected Android versions should consider mitigating steps to enhance their security.

References