Vulnerability Database · Android · Package report
platform/system/bt: vulnerability history, versions and safety
platform/system/bt is a package in the Android ecosystem. Vulert records 53 vulnerabilities for it across 8 releases, from Jul 2020 to Mar 2025. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.
Every vulnerability has a patched version to move to.
No published version shipped hostile code.
Vulert verdict on platform/system/bt i
Updated on 23 Oct 2026
Every vulnerability Vulert records for this package has a fix, and the newest was recorded 01 Mar 2025. Apply the fixes listed below and you are clear.
What to do: Move the affected dependencies to the fixed versions listed below, then keep the package monitored so the next vulnerability reaches you. Fix it, then keep watch: Vulert alerts you when a new vulnerability affects the version you run. Monitor it with Vulert →
- Vulnerabilities on record 53 over 4 years · 0 in the last year i
- Latest disclosure 01 Mar 2025 i
- Highest CVSS n/a i
- With no published fix 0 i
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Versions
Which versions are affected
Every version Vulert holds for platform/system/bt, newest first, with the vulnerabilities that name it. A version with a count of zero has no recorded vulnerabilities; open a version to see the vulnerabilities it is exposed to.
Newest 8 of 8 versions on record. Severity counts are the vulnerabilities recorded against that exact release.
02 Disclosure history
How often vulnerabilities are recorded
Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 0 of the 53 were recorded in the last 12 months.
03 Vulnerabilities
Recorded vulnerabilities for platform/system/bt
| Vulnerability | Severity | Fixed version ↓ | Disclosed ↓ |
|---|---|---|---|
| CVE-2025-0079: Bluetooth Package Unencrypted Channel Vulnerability | N/A high | 12:2025-03-01 | 01 Mar 2025 |
| CVE-2021-39809: Crafted AVRCP Ctrl Response Packet Causes Out-of-bounds Read in Bluetooth | N/A high | 10:2022-04-01 | 01 Apr 2022 |
| CVE-2022-20410: Crafted AVRCP Response Causes Out-of-bounds Read in Bluetooth | N/A high | 10:2022-10-01 | 01 Oct 2022 |
| CVE-2022-20221: Crafted AVRCP cmd packet Causes Out-of-bounds Read in Bluetooth | N/A high | 10:2022-07-01 | 01 Jul 2022 |
| CVE-2023-40129: Bluetooth GATT build_read_multi_rsp Underflow OOB Write | N/A critical | 12:2023-10-01 | 01 Oct 2023 |
Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback
Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315