CVE-2025-26438: High severity Google Android vulnerability
In smpprocesssecureconnectionoobdata of smpact.cc, there is a possible way to bypass SMP authentication due to Incorrect implementation of a protocol. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-26438?
CVE-2025-26438 has a high severity rating due to the potential for remote escalation of privileges.
How do I fix CVE-2025-26438?
To remediate CVE-2025-26438, ensure that your Android device is updated to the latest security patch that addresses this vulnerability.
What causes CVE-2025-26438?
CVE-2025-26438 is caused by an incorrect implementation of the SMP authentication protocol in Android's Bluetooth stack.
Who is affected by CVE-2025-26438?
CVE-2025-26438 affects users of Android devices that utilize Bluetooth connections.
Can CVE-2025-26438 be exploited without user interaction?
Yes, CVE-2025-26438 can be exploited remotely without the need for user interaction.