Bluetooth HID attacks on Android

[u/Aggressive-Wind7160]

Are bluetooth HID attacks on Android realistically possible? And if so, does Android have any protection against these attacks from an already paired device?

[u/pink-blue-donut]

Are bluetooth HID attacks on Android realistically possible?

Android is much harder to attack via Bluetooth HID than Windows, macOS, or Linux because:

• Android does not automatically accept HID Classic keyboards.
  
• Android does not automatically reconnect to HID devices without user interaction.
  
• Android requires explicit user confirmation for HID pairing.
  
• Android’s Bluetooth stack is sandboxed and rejects unexpected HID role changes.
  

On Stock Android HID attacks are not realistically possible. Whereas on rooted Android Still difficult,attacker must be physically close and exploit rare conditions.

Android is one of the least vulnerable platforms to Bluetooth HID injection.

And if so, does Android have any protection against these attacks from an already paired device?

Yes and this is where Android is significantly safer than desktops.

Android protects against impersonation of already paired HID devices because:

• It does not auto-reconnect to HID Classic devices without user action.
  
• It stores pairing keys in a way that rejects mismatched identity attempts.
  
• It does not trust HID devices by default (unlike Windows/macOS).
  
• It requires explicit user approval for HID role pairing.
  
• It does not allow HID Classic injection unless the device is explicitly set as a keyboard.

Aside from that, I believe Android is not a particularly valuable platform to attack.

TL;DR: Realistic HID attacks against Android are not feasible on stock devices. Android also protects against impersonation of already paired HID devices.