CVE-2025-26453: Bluetooth Module Cross User Data Leak Vulnerability
Summary
CVE-2025-26453: In isContentUriForOtherUser of BluetoothOppSendFileInfo.java, there is a possible cross user data leak due to a logic error in the code. Affects platform/packages/modules/Bluetooth across 4 version ranges.
>= 13:0, < 13:2025-06-01
>= 14:0, < 14:2025-06-01
>= 15:0, < 15:2025-06-01
>= 16-next:0, < 16-next:2025-06-01
Fixed in 16-next:2025-06-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Bluetooth module in Android is responsible for enabling wireless communication between devices. It facilitates file transfers, audio streaming, and other functionalities that rely on Bluetooth technology. This module is integral to many applications and services, making its security paramount. The vulnerability in question arises from a logic error in the code, specifically in the isContentUriForOtherUser function, which can lead to unauthorized data access across user profiles.
Vulnerability Detail
In the isContentUriForOtherUser function of BluetoothOppSendFileInfo.java, a logic error allows for a cross-user data leak. This vulnerability can lead to local information disclosure without requiring additional execution privileges or user interaction. Attackers could exploit this flaw to access sensitive data from other users on the same device, posing a significant privacy risk.
How To Fix
Minimum fixed version
16-next:2025-06-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. Users are advised to apply the available patches as soon as possible to mitigate the risk.
Conclusion
The CVE-2025-26453 vulnerability poses a significant risk to user privacy by allowing unauthorized access to data across user profiles in the Android Bluetooth module. It is crucial for users to update their systems to the patched versions to mitigate this risk effectively.
See every vulnerability recorded for platform/packages/modules/Bluetooth →
FAQ
CVE-2025-26453 is a vulnerability in the Android Bluetooth module that allows for cross-user data leaks due to a logic error in the code.
This vulnerability can lead to unauthorized access to sensitive data from other users on the same device, compromising user privacy.
No, user interaction is not needed for exploitation, making it a more serious security concern.
You can check if your application is affected by using Vulert, which monitors open-source vulnerabilities in real-time. Visit Vulert Scanner to use the Vulert playground without signup.
If your device is affected, you should update the Bluetooth module to the latest patched version as soon as possible.
Related vulnerabilities
Recent vulnerabilities recorded for platform/packages/modules/Bluetooth.
