CVE-2024-1638 is a Bluetooth vulnerability concerning improper access control in LE Secure Connections. This flaw allows unauthorized reading and writing of Bluetooth characteristics when specific permission combinations are not correctly configured. The vulnerability exists because the stack fails to enforce permission checks if BT_GATT_PERM_READ_ENCRYPT/AUTHEN or BT_GATT_PERM_WRITE_ENCRYPT/AUTHEN are not set alongside BT_GATT_PERM_READ_LESC/BT_GATT_PERM_WRITE_LESC. Despite a CVSS score of 9.1, SOCRadar's Vulnerability Risk Score (SVRS) is 30, suggesting a lower immediate risk than the CVSS score indicates. However, given the "In The Wild" tag, it is crucial to monitor for potential exploitation. Failure to address this issue could lead to unauthorized data access and potentially compromise connected devices. The vulnerability is significant due to the widespread use of Bluetooth technology and the potential for malicious actors to exploit the relaxed permission checks.