CVE-2025-48593: Bluetooth Module Remote Code Execution Vulnerability
Summary
CVE-2025-48593: In bta_hf_client_cb_init of bta_hf_client_main.cc, there is a possible remote code execution due to a use after free. Affects platform/packages/modules/Bluetooth across 5 version ranges.
>= 13:0, < 13:2025-11-01
>= 14:0, < 14:2025-11-01
>= 15:0, < 15:2025-11-01
>= 16:0, < 16:2025-11-01
>= 16-next:0, < 16-next:2025-11-01
Fixed in 16-next:2025-11-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Bluetooth module in the Android ecosystem is responsible for enabling wireless communication between devices. It facilitates various functionalities such as file transfer, audio streaming, and device pairing. This module is crucial for seamless connectivity and user experience. However, it is susceptible to vulnerabilities that can be exploited remotely, potentially compromising device security.
Vulnerability Detail
In the Bluetooth module, specifically in the bta_hf_client_cb_init function of bta_hf_client_main.cc, a use-after-free vulnerability exists. This flaw allows an attacker to execute arbitrary code remotely without requiring any user interaction. The vulnerability arises from improper memory management, which can lead to critical security breaches, including unauthorized access to sensitive data and control over the affected device.
How To Fix
Minimum fixed version
16-next:2025-11-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds available to mitigate this vulnerability without applying the patch. Users are advised to keep their devices updated to the latest version to ensure security.
Conclusion
The CVE-2025-48593 vulnerability poses a significant risk to users of the Bluetooth module in Android devices. It is crucial to apply the available patches to safeguard against potential exploitation. Regular updates and monitoring for vulnerabilities are essential practices for maintaining device security.
See every vulnerability recorded for platform/packages/modules/Bluetooth →
FAQ
CVE-2025-48593 is a critical vulnerability in the Bluetooth module of Android that allows remote code execution due to a use-after-free error.
You can check if your application is affected by using the Vulert playground at Vulert Scanner, which allows you to monitor vulnerabilities in real-time without any signup.
Exploitation of this vulnerability can lead to unauthorized access to the device, data breaches, and potential control over the device by malicious actors.
Yes, a patch is available for the Bluetooth module in Android versions 16-next and 15. Users should update to version 16-next:2025-11-01 or 15:2025-11-01 to mitigate the risk.
If you cannot update your device, it is recommended to limit Bluetooth usage and avoid connecting to unknown devices until the vulnerability is patched.
References
Related vulnerabilities
Recent vulnerabilities recorded for platform/packages/modules/Bluetooth.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
