CVE-2025-0079: High severity Google Android vulnerability
In multiple locations, there is a possible way that avdtp and avctp channels could be unencrypted due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-0079?
CVE-2025-0079 is classified as a moderate severity vulnerability due to the potential for local escalation of privilege.
How do I fix CVE-2025-0079?
To mitigate CVE-2025-0079, users should update their Android devices to the latest security patch provided by Google.
What impact does CVE-2025-0079 have on Android devices?
CVE-2025-0079 may allow an attacker to exploit a logic error to access unencrypted avdtp and avctp channels, potentially leading to unauthorized privilege escalation.
Does CVE-2025-0079 require user interaction for exploitation?
No, CVE-2025-0079 does not require user interaction for exploitation, making it a greater risk.
Which versions of Android are affected by CVE-2025-0079?
CVE-2025-0079 affects multiple versions of Android that utilize avdtp and avctp, so users should review their security updates.