Local Privilege Escalation Flaw in Bluetooth Modules from Android

CVE-2025-0079

What is CVE-2025-0079?

A logic error in the implementation of avdtp and avctp channels within Android's Bluetooth modules poses a vulnerability that could allow an attacker to exploit unencrypted channels. This flaw can lead to local privilege escalation, requiring user execution privileges. Notably, the exploitation of this weakness does not necessitate any user interaction, making it a significant concern for affected systems.

References