cbcvebase.
CVE-2025-0075
published 2025-08-26

CVE-2025-0075: In process_service_search_attr_req of sdp_server.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to remote code…

PriorityP262critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
0.40%
31.9th percentile
In process_service_search_attr_req of sdp_server.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected

5 ranges
VendorProductVersion rangeFixed in
googleandroid——
googleandroid——
googleandroid——
platformpackages_modules_bluetooth>= 15-next:0 < 15-next:2025-03-0115-next:2025-03-01
platformpackages_modules_bluetooth>= 15:0 < 15:2025-03-0115:2025-03-01

Detection & IOCsextracted from sources · hover to see the quote

  • →Target function for exploitation is `process_service_search_attr_req` in `sdp_server.cc` — monitor for anomalous SDP (Service Discovery Protocol) traffic or crashes originating from this function in Bluetooth stack logs. ↗
  • →Vulnerability is remotely exploitable with no privileges and no user interaction required — any device with Bluetooth SDP exposed is at risk; monitor for unexpected Bluetooth SDP ServiceSearchAttribute requests from untrusted/unknown devices. ↗
  • →Scope is limited to Android 15; prioritize detection and patching on devices running AOSP 15. ↗
  • ·This is rated CRITICAL RCE with no privileges or user interaction needed, meaning exploitation is entirely remote over Bluetooth SDP — no user-facing indicators may be present during an attack. ↗
  • ·Only Android 15 (AOSP) is listed as affected in the March 2025 bulletin; earlier versions are not mentioned, which may affect detection/patching scope. ↗
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.