CVE-2025-22408: Use After Free
In rfcchecksendcmd of rfcutils.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-22408?
CVE-2025-22408 has a critical severity rating due to the potential for remote code execution without any user interaction.
How do I fix CVE-2025-22408?
To fix CVE-2025-22408, ensure that your Google Android device is updated to the latest security patch provided by Google.
What types of devices are affected by CVE-2025-22408?
CVE-2025-22408 affects devices running specific versions of Google Android that utilize the vulnerable Bluetooth module.
Is user interaction required for the exploitation of CVE-2025-22408?
No, CVE-2025-22408 does not require user interaction for exploitation, making it particularly dangerous.
What could an attacker potentially achieve by exploiting CVE-2025-22408?
An attacker could execute arbitrary code on the affected device, potentially compromising the device's integrity and user data.