Out of Bounds Write Vulnerability in Bluetooth Stack for Android Devices

CVE-2025-0084

What is CVE-2025-0084?

A use-after-free vulnerability has been identified in the Android Bluetooth stack, specifically related to Bluetooth communication functionality such as Hands-Free Profile (HFP). This flaw allows for an out-of-bounds write, which can potentially lead to remote code execution. Exploitation of this vulnerability does not require user interaction, making it particularly concerning for users with HFP support enabled on their devices.

References