A vulnerable code in onCreate of SecDevicePickerDialog prior to SMR Aug-2022 Release 1, allows attackers to trick the user to select an unwanted bluetooth device via tapjacking/overlay attack.
| Software | From | Fixed in |
|---|---|---|
| google / android | 10.0 | 10.0.x |
| google / android | 11.0 | 11.0.x |
| google / android | 12.0 | 12.0.x |