PT-2025-43450 · Unknown · Btm Ble Sec.Cc

Published 2025-10-23 · Updated 2026-03-06 · CVE-2024-43766

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions versions prior to the fix for CVE-2024-43766

Description The software contains a potential issue with unencrypted communication due to improper error handling in multiple functions within the btm ble sec.cc file. This could allow for remote information disclosure within a limited proximity, without requiring additional permissions or user interaction.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

Related Identifiers

ASB-A-288144143

CVE-2024-43766

Affected Products

Btm Ble Sec.Cc

References · 12

• https://osv.dev/vulnerability/ASB-A-288144143 · Vendor Advisory
• https://source.android.com/docs/security/bulletin/2026/2026-03-01 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-43766 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-43766 · Security Note
• https://t.me/cveNotify/154456 · Telegram Post
• https://t.me/cveNotify/153839 · Telegram Post
• https://source.android.com/security/bulletin/2026-03-01 · Note
• https://android.googlesource.com/platform/packages/modules/Bluetooth/+/7ccb456f6d29cc6077a4d1c6a9b515033378ec32 · Note
• https://android.googlesource.com/platform/packages/modules/Bluetooth/+/769a3dea8016dd84bea05405d1d5c974755fdb21 · Note
• https://t.me/cveNotify/153920 · Telegram Post
• https://reddit.com/r/GalaxyS21/comments/1qqh2tt/s21_firmware_security_update_downloaded_in_usa · Reddit Post
• https://reddit.com/r/androiddev/comments/1oe10qe/checking_if_my_android_devices_have_critical_high · Reddit Post