CVE-2025-48539: Use After Free
In SendPacketToPeer of aclarbiter.cc, there is a possible out of bounds read due to a use after free. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
Other sources
In SendPacketToPeer of aclarbiter.cc, there is a possible out of bounds read due to a use after free. This could lead to remotely-triggered local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
— OSV
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/platform/packages/modules/Bluetoothto a version that resolves this vulnerability.Fixed in 16-next:2025-09-01 - Upgrade
Upgrade
android/platform/packages/modules/Bluetoothto a version that resolves this vulnerability.Fixed in 15:2025-09-01 - Upgrade
Upgrade
android/platform/packages/modules/Bluetoothto a version that resolves this vulnerability.Fixed in 16:2025-09-01
Event History
Frequently Asked Questions
What is the severity of CVE-2025-48539?
CVE-2025-48539 has a high severity rating due to the potential for remote code execution.
How do I fix CVE-2025-48539?
To fix CVE-2025-48539, ensure your Android device is updated with the latest security patches from Google.
What type of vulnerability is CVE-2025-48539?
CVE-2025-48539 is a use after free vulnerability that can lead to out of bounds read.
Who is affected by CVE-2025-48539?
CVE-2025-48539 affects users of Google Android that utilize the affected Bluetooth module.
Is user interaction required to exploit CVE-2025-48539?
No, user interaction is not required for the exploitation of CVE-2025-48539.