Incorrect/missing Android 12 patch metadata for ASB-A-308429049

[Kafelixon]

The vulnerability page for ASB-A-308429049 appears to contain incorrect patch references for Android 12:

https://osv.dev/vulnerability/ASB-A-308429049

The patches currently associated with Android 12 do not appear to be correct, and there is no metadata available that clearly identifies the relevant Android 12 fixes.

I investigated the upstream Android repositories and found the following commits, which appear to be the correct patches for Android 12:

platform/system/bt:
https://android.googlesource.com/platform/system/bt/+/9dd4fadb2a05e363c269e190180dccfaf78346b4
platform/packages/apps/Bluetooth:
https://android.googlesource.com/platform/packages/apps/Bluetooth/+/32c40a35e023c2535b884738e8aaf886e84f0657

Could you verify these commits and update the OSV record with the correct Android 12 patch references and associated metadata?

[jess-lowe]

Hi @Kafelixon, thanks for the report! I've brought it up with the relevant Android teams and it seems it is a known issue they plan to fix, just don't currently have a timeline for when this will happen.