CVE-2025-36911

Step 1: Target Identification: The attacker identifies a target user or device utilizing key-based pairing.

Step 2: Malicious Request Crafting: The attacker crafts a specially designed pairing request. This request contains a manipulated or crafted identifier.

Step 3: Pairing Initiation: The attacker initiates the pairing process with the target device, sending the malicious pairing request.

Step 4: Logic Flaw Trigger: The target device processes the malicious request, triggering the logic error within the key-based pairing implementation.

Step 5: Information Disclosure: Due to the logic error, the target device inadvertently discloses the target user's conversations and location data to the attacker.

The vulnerability stems from a logic error within the key-based pairing implementation. Specifically, the code fails to properly validate or sanitize identifiers during the pairing process. This allows an attacker to craft a malicious pairing request containing a crafted identifier. This crafted identifier exploits a flaw in how the system handles paired devices, leading to the disclosure of sensitive data associated with the targeted user's conversations and location. The root cause is likely an improper check or lack of a check on the identifier before it is used to access or retrieve user data. This could involve a memory leak or an unauthorized access scenario.