Use After Free Vulnerability in Bluetooth Stack by Google
CVE-2025-22404
Currently unrated
What is CVE-2025-22404?
A vulnerability exists in the Bluetooth stack of Google's Android OS that could allow an attacker to execute arbitrary code due to a use after free condition in the avct_lcb_msg_ind function within avct_lcb_act.cc. This flaw poses a risk of local privilege escalation without requiring any user interaction, making it potentially exploitable by unauthorized users. Users are encouraged to apply available patches to safeguard against such threats.
Affected Version(s)
Android 15