CVE-2025-26441: Bluetooth Module Out of Bounds Read Vulnerability
Summary
CVE-2025-26441: In add_attr of sdp_discovery.cc, there is a possible out of bounds read due to a missing bounds check. Affects platform/packages/modules/Bluetooth across 4 version ranges.
>= 13:0, < 13:2025-06-01
>= 14:0, < 14:2025-06-01
>= 15:0, < 15:2025-06-01
>= 16-next:0, < 16-next:2025-06-01
Fixed in 16-next:2025-06-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Bluetooth module in the Android ecosystem is responsible for managing Bluetooth connections and data transfers between devices. It provides essential functionalities such as device discovery, pairing, and communication. This module is widely used across various Android applications and devices, making its security critical. The vulnerability in question arises from a flaw in the 'add_attr' function within the 'sdp_discovery.cc' file, which can lead to potential information disclosure.
Vulnerability Detail
In the 'add_attr' function of 'sdp_discovery.cc', a missing bounds check can result in an out-of-bounds read. This vulnerability allows an attacker to exploit the Bluetooth module, leading to remote information disclosure without requiring additional execution privileges. User interaction is not necessary for exploitation, making it a significant security risk.
How To Fix
Minimum fixed version
16-next:2025-06-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, consider disabling Bluetooth functionality until the patch is applied. This can be done through the device settings or programmatically by modifying the Bluetooth state in your application.
Conclusion
The CVE-2025-26441 vulnerability in the Android Bluetooth module poses a significant risk due to its potential for remote information disclosure. It is crucial to apply the necessary patches and monitor for vulnerabilities to maintain the security of applications utilizing this module.
See every vulnerability recorded for platform/packages/modules/Bluetooth →
FAQ
CVE-2025-26441 is a vulnerability in the Bluetooth module of the Android ecosystem that allows for an out-of-bounds read, potentially leading to information disclosure.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
The primary risk is remote information disclosure, which could expose sensitive data without requiring user interaction or additional privileges.
You can apply the patch by updating your Bluetooth module to the fixed versions available in the official repository.
Yes, Vulert provides real-time monitoring and alerts for open-source vulnerabilities using just the gradle.lockfile, ensuring your software remains secure.
Related vulnerabilities
Recent vulnerabilities recorded for platform/packages/modules/Bluetooth.
