This vulnerability involves a logic error in multiple functions of the btm_sec.cc component in Google Android 17, which may enable an attacker to intercept SMS messages remotely. The flaw leads to information disclosure without requiring elevated execution privileges. Exploitation depends on user interaction. No CVSS score or detailed vendor advisory is currently available, and no patch or remediation level has been confirmed.

An attacker could remotely intercept SMS messages due to the logic error, resulting in unauthorized disclosure of potentially sensitive information. No additional execution privileges are needed, but user interaction is required for exploitation. There is no evidence of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution with unexpected prompts or interactions that could trigger exploitation.