CVE-2025-22407: Bluetooth Module Vulnerability in Android Leading to Arbitrary Code Execution
Summary
CVE-2025-22407: In hidd_check_config_done of hidd_conn.cc, there is a possible way to execute arbitrary code due to a use after free. Affects platform/packages/modules/Bluetooth across 2 version ranges.
>= 15:0, < 15:2025-03-01
>= 15-next:0, < 15-next:2025-03-01
Fixed in 15-next:2025-03-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Bluetooth module in Android is a critical component that enables wireless communication between devices. It supports various profiles and protocols, allowing users to connect peripherals such as headphones, speakers, and other devices seamlessly. However, vulnerabilities in this module can expose devices to significant risks, including unauthorized access and data breaches.
Vulnerability Detail
In the hidd_check_config_done function of hidd_conn.cc, a use-after-free vulnerability exists that could allow an attacker to execute arbitrary code. This vulnerability arises when the memory allocated for an object is freed, but the code continues to reference that memory, leading to potential exploitation. The ramifications include local information disclosure without requiring additional execution privileges, making it particularly dangerous as user interaction is not necessary for exploitation.
How To Fix
Minimum fixed version
15-next:2025-03-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. Users are advised to apply the patch as soon as it becomes available.
Conclusion
The vulnerability CVE-2025-22407 in the Android Bluetooth module poses significant risks due to its potential for arbitrary code execution. Users are strongly encouraged to update their devices to the latest patched version to mitigate these risks. Regular monitoring for vulnerabilities using tools like Vulert can help maintain security.
See every vulnerability recorded for platform/packages/modules/Bluetooth →
FAQ
CVE-2025-22407 is a vulnerability in the Bluetooth module of Android that allows for arbitrary code execution due to a use-after-free error.
You can check if your application is affected by using the Vulert playground at Vulert Scanner, which monitors open-source vulnerabilities in real-time.
The risks include unauthorized access to sensitive information and the potential for attackers to execute arbitrary code on the affected device.
No, user interaction is not needed for exploitation, making it particularly concerning.
You can update your Bluetooth module by going to your device's software update settings or downloading the latest firmware from the manufacturer's website.
Related vulnerabilities
Recent vulnerabilities recorded for platform/packages/modules/Bluetooth.
