This vulnerability is located in the bta_jv_rfcomm_connect function of bta_jv_act.cc, where a logic error allows an application to establish a secure Bluetooth connection without completing the required bonding process. The result is a local escalation of privilege; an attacker who has local access to the device’s Bluetooth stack can gain higher privileges on the device without acquiring additional execution rights. No user interaction is necessary, and the flaw does not provide remote code execution or remote access.

Google Android devices that contain the affected Bluetooth stack implementation are susceptible. No specific build or version number is cited in the advisory, so all current Android releases that include the affected code may be vulnerable until a vendor update is applied.

Because the flaw directly enables local privilege escalation, the potential impact is high. The CVSS score is not disclosed, but the logical bypass is severe. The EPSS score is not available and this vulnerability is not listed in the CISA KEV catalog, indicating no known public exploits at this time. Attackers with local access to the Bluetooth interface can exploit the defect automatically, with no user interaction required.