CVE-2025-22406: Use After Free
In bnepuchecksendpacket of bneputils.cc, there is a possible way to achieve code execution due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-22406?
CVE-2025-22406 has a severity rating of critical due to its potential for local privilege escalation and code execution.
How do I fix CVE-2025-22406?
To fix CVE-2025-22406, users should update their Android devices to the latest security patch provided by Google.
What versions of Android are affected by CVE-2025-22406?
CVE-2025-22406 affects specific versions of Google Android that utilize the Bluetooth functionality.
Can CVE-2025-22406 be exploited without user interaction?
Yes, CVE-2025-22406 can be exploited without any user interaction, making it more dangerous.
What types of systems are vulnerable to CVE-2025-22406?
CVE-2025-22406 primarily affects devices running Google Android that use Bluetooth capabilities.