CVE-2020-35693

https://notcve.org/view.php?id=CVE-2020-35693

24 Dec 2020 — On some Samsung phones and tablets running Android through 7.1.1, it is possible for an attacker-controlled Bluetooth Low Energy (BLE) device to pair silently with a vulnerable target device, without any user interaction, when the target device's Bluetooth is on, and it is running an app that offers a connectable BLE advertisement. An example of such an app could be a Bluetooth-based contact tracing app, such as Australia's COVIDSafe app, Singapore's TraceTogether app, or France's TousAntiCovid (formerly St... • https://github.com/alwentiu/contact-tracing-research/blob/main/samsung.pdf •