CVE-2025-48539: Critical Remote Code Execution Vulnerability in Android Bluetooth Module
Summary
CVE-2025-48539: In SendPacketToPeer of acl_arbiter.cc, there is a possible out of bounds read due to a use after free. Affects platform/packages/modules/Bluetooth across 3 version ranges.
>= 15:0, < 15:2025-09-01
>= 16:0, < 16:2025-09-01
>= 16-next:0, < 16-next:2025-09-01
Fixed in 16-next:2025-09-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Android Bluetooth module is a core component of the Android operating system, enabling wireless communication between devices. It facilitates various functionalities such as file transfers, audio streaming, and device pairing. However, due to its extensive use and integration, vulnerabilities in this module can have severe implications, potentially allowing unauthorized access and control over connected devices.
Vulnerability Detail
In the SendPacketToPeer function of acl_arbiter.cc, there exists a critical vulnerability characterized by a possible out-of-bounds read due to a use-after-free condition. This flaw can lead to remote code execution (RCE) by an adjacent attacker without requiring additional execution privileges. The vulnerability poses a significant risk as it can be exploited without user interaction, making it a prime target for malicious actors.
How To Fix
Minimum fixed version
16-next:2025-09-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the patches as soon as they are available.
Conclusion
CVE-2025-48539 represents a significant security risk within the Android Bluetooth module, allowing for potential remote code execution. Users and developers are strongly advised to apply the available patches promptly to safeguard their devices against exploitation.
See every vulnerability recorded for platform/packages/modules/Bluetooth →
FAQ
CVE-2025-48539 is a critical vulnerability in the Android Bluetooth module that allows for remote code execution due to a use-after-free condition.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
The vulnerability can lead to unauthorized remote code execution, allowing attackers to gain control over affected devices without user interaction.
Yes, patches are available for different versions of the Android Bluetooth module. It is recommended to update to the latest patched version.
While there are no specific workarounds, it is crucial to monitor the situation and apply the patch as soon as possible to mitigate risks.
Related vulnerabilities
Recent vulnerabilities recorded for platform/packages/modules/Bluetooth.
