cbcvebase.
CVE-2025-0079
published 2025-08-26

CVE-2025-0079: In multiple locations, there is a possible way that avdtp and avctp channels could be unencrypted due to a logic error in the code. This could lead to local…

high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
In multiple locations, there is a possible way that avdtp and avctp channels could be unencrypted due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.

Affected

16 ranges
VendorProductVersion rangeFixed in
googleandroid
googleandroid
googleandroid
googleandroid
googleandroid
googleandroid
googleandroid
googleandroid
googleandroid
googleandroid
googleandroid
platformpackages_modules_bluetooth>= 13:0 < 13:2025-03-0113:2025-03-01
platformpackages_modules_bluetooth>= 14:0 < 14:2025-03-0114:2025-03-01
platformpackages_modules_bluetooth>= 15:0 < 15:2025-03-0115:2025-03-01
platformsystem_bt>= 12:0 < 12:2025-03-0112:2025-03-01
platformsystem_bt>= 12L:0 < 12L:2025-03-0112L:2025-03-01