Android Elevation of Privilege Vulnerability in Bluetooth Jv Component

A logic error in the Bluetooth Jv component of Android may allow a local elevation of privilege by bypassing bonding requirements for secure connections. The vulnerability is present in AOSP versions 14, 15, 16, and 16-qpr2. Exploitation does not require additional execution privileges or user interaction.

Impact

Exploitation of this vulnerability could lead to unauthorized access to elevated privileges, allowing a user to perform actions or access resources that are normally restricted.

Remediation

Users can update their devices to the June 2026 security patch level to address this vulnerability.