High severity7.8NVD Advisory· Published Jun 1, 2026· Updated Jun 3, 2026
CVE-2026-0045
CVE-2026-0045
Description
In bta_jv_rfcomm_connect of bta_jv_act.cc, there is a possible bypass of bonding for a secure connection due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
1- source.android.com/docs/security/bulletin/2026/2026-06-01nvdVendor Advisory
News mentions
1- Android SDK: 25 Vulnerabilities Disclosed, Including Actively Exploited Zero-DayVypr Intelligence · Jun 1, 2026