CVE-2024-56193
📋 TL;DR
This vulnerability allows unauthorized access to Bluetooth adapter details on affected Android devices through a permissions bypass. It enables local information disclosure without requiring user interaction or elevated privileges. Primarily affects Google Pixel devices running specific Android versions.
💻 Affected Systems
- Google Pixel devices
📦 What is this software?
Android by Google
⚠️ Risk & Real-World Impact
Worst Case
An attacker with physical access or malicious app could extract Bluetooth MAC addresses, device names, and connection history, potentially enabling device tracking or Bluetooth-based attacks.
Likely Case
Malicious apps could silently collect Bluetooth device information for profiling or tracking purposes without user consent.
If Mitigated
With proper app sandboxing and Bluetooth permissions enforcement, impact is limited to non-sensitive Bluetooth metadata.
🎯 Exploit Status
Exploitation requires malicious app installation but no user interaction. No public exploit code known.
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: May 2025 Android security update
Vendor Advisory: https://source.android.com/security/bulletin/pixel/2025-05-01
Restart Required: Yes
Instructions:
1. Go to Settings > System > System update. 2. Check for updates. 3. Install May 2025 security update. 4. Restart device.
🔧 Temporary Workarounds
Disable Bluetooth when not in use
androidTurn off Bluetooth to prevent information disclosure through this vector
adb shell settings put global bluetooth_on 0
Restrict app Bluetooth permissions
androidReview and revoke Bluetooth permissions for untrusted apps
🧯 If You Can't Patch
- Implement mobile device management (MDM) to control app installations
- Disable Bluetooth on corporate devices when not required for business use
🔍 How to Verify
Check if Vulnerable:
Check Android security patch level in Settings > About phone > Android version. If before May 2025, device is vulnerable.Check Version:
adb shell getprop ro.build.version.security_patchVerify Fix Applied:
Verify security patch level shows 'May 5, 2025' or later in Settings > About phone > Android version.📡 Detection & Monitoring
Log Indicators:
- Unusual Bluetooth permission requests from apps
- Multiple Bluetooth device discovery attempts
Network Indicators:
- Excessive Bluetooth scanning activity
SIEM Query:
source="android_logs" AND (event="BLUETOOTH_PERMISSION" OR event="BLUETOOTH_SCAN") AND user="unprivileged"