Arbitrary Activity Launch Vulnerability in Android Bluetooth Module

CVE-2025-22437

What is CVE-2025-22437?

The Bluetooth module in Android contains a vulnerability that stems from a logic error in the setMediaButtonReceiver function across multiple files. This flaw allows attackers to launch arbitrary activities from the background without requiring any user interaction or elevated privileges. It represents a significant risk as it enables local escalation of privilege, potentially compromising user data and device security. Remediation involves applying the latest patches to minimize exposure to this vulnerability.

References