A vulnerability in hidd_check_config_done of hidd_conn.cc allows for the execution of arbitrary code due to a use after free. This could lead to local information disclosure without requiring additional execution privileges. User interaction is not necessary for exploitation.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2025-22407 |
Exploitation
To exploit this vulnerability, an attacker could leverage the use after free condition in the hidd_check_config_done function, allowing them to execute arbitrary code on the affected system. This can be done locally without the need for user interaction, making it a significant risk for users.
Affected Products
- Bluetooth Module: Vulnerable to arbitrary code execution due to improper handling of memory.
- Android Devices: All devices utilizing the affected Bluetooth module may be at risk.
Mitigation
To mitigate this vulnerability, users should ensure their devices are updated with the latest security patches provided by Android. Regularly checking for updates and applying them promptly can help protect against potential exploitation.