CVE-2024-49714: Bluetooth Module Heap Buffer Overflow Vulnerability
Summary
CVE-2024-49714: In avrc_vendor_msg of avrc_opt.cc, there is a possible out of bounds write due to a heap buffer overflow. Affects platform/packages/modules/Bluetooth across 3 version ranges.
>= 13:0, < 13:2025-09-01
>= 14:0, < 14:2025-09-01
>= 16-next:0, < 16-next:2025-09-01
Fixed in 16-next:2025-09-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Android Bluetooth module is a critical component that enables wireless communication between devices. It supports various profiles and protocols, allowing for seamless connectivity and data exchange. However, this module is susceptible to vulnerabilities that can lead to serious security risks, such as unauthorized access and privilege escalation.
Vulnerability Detail
In avrc_vendor_msg of avrc_opt.cc, there is a possible out of bounds write due to a heap buffer overflow. This vulnerability can lead to paired device escalation of privilege without requiring additional execution privileges. User interaction is not needed for exploitation, making it particularly dangerous as it can be exploited remotely.
How To Fix
Minimum fixed version
16-next:2025-09-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is recommended to apply the patch as soon as it becomes available.
Conclusion
CVE-2024-49714 is a serious vulnerability in the Android Bluetooth module that can lead to privilege escalation without user interaction. It is crucial to apply the available patches to mitigate the risks associated with this vulnerability.
See every vulnerability recorded for platform/packages/modules/Bluetooth →
FAQ
CVE-2024-49714 is a vulnerability in the Android Bluetooth module that allows for a heap buffer overflow, potentially leading to privilege escalation.
You can check if your application is affected by using Vulert, which monitors open-source vulnerabilities in real-time. Visit Vulert Scanner to use the Vulert playground without signup.
The main risk is unauthorized access to paired devices, which can lead to data breaches and other security issues.
No, user interaction is not needed for exploitation, making it a significant security concern.
The best way to protect your device is to update the Bluetooth module to the patched version as soon as it is available.
Related vulnerabilities
Recent vulnerabilities recorded for platform/packages/modules/Bluetooth.
