Arbitrary Code Execution Vulnerability in Android Bluetooth Module
CVE-2025-22407
Currently unrated
What is CVE-2025-22407?
The Android Bluetooth module contains a vulnerability that allows for potential arbitrary code execution due to a use after free condition in the hidd_check_config_done function. This could lead to unauthorized access to sensitive information without requiring additional execution privileges or user interaction. Proper security measures should be taken to mitigate the risks associated with this vulnerability.
Affected Version(s)
Android 15