This vulnerability in multiple locations within Google Android's Bluetooth LE pairing process allows an attacker to bypass required user interaction due to a logic error. This flaw enables an attacker in close physical proximity to escalate privileges on the device without needing additional execution privileges or user involvement. Affected Android versions include 14, 15, 16, and 16-qpr2. The CVSS 3.1 base score is 8.0, reflecting high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available, and no known exploits have been reported in the wild.

Successful exploitation can lead to elevation of privilege remotely within Bluetooth range, allowing an attacker to gain higher privileges on the device without user consent or interaction. The CVSS score indicates high impact on confidentiality, integrity, and availability, meaning an attacker could potentially access sensitive data, modify system settings, or disrupt device functionality.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when pairing Bluetooth LE devices and avoid pairing with untrusted or unknown devices. Monitor official Google Android security advisories for updates.