In multiple functions of sdp_server.cc, there is a possible use after free due to a logic error in the code. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.8 | CVE-2025-22412 |
Exploitation
The vulnerability can be exploited by an attacker within proximity to the affected device, allowing them to execute arbitrary code without requiring any user interaction. This makes it particularly dangerous in environments where multiple devices are in close proximity.
Affected Products
- Bluetooth Module: Vulnerable to remote code execution due to the logic error in the sdp_server.cc file.
- Android Devices: All devices utilizing the affected Bluetooth module are at risk.
Mitigation
To mitigate this vulnerability, users should ensure their devices are updated with the latest security patches provided by Android. Additionally, disabling Bluetooth when not in use can help reduce the risk of exploitation.