CVE-2025-0075

In processservicesearchattrreq of sdpserver.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-0074

In processserviceattrrsp of sdpdiscovery.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

Google Android Memory Misreference Vulnerability (CNVD-2025-19921)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a memory misreference vulnerability, which stems from a mix-up in sdpdiscovery.cc in the sdpsndservicesearchreq directive responsible for freeing memory, which can be exploited by an attacker to...

Google Android Code Execution Vulnerability (CNVD-2025-19983)

Google Android is a Linux-based open source operating system from Google. A code execution vulnerability exists in Google Android due to a free use of processserviceattrrsp in sdpdiscovery.cc. An attacker can exploit the vulnerability to execute arbitrary code on the system...

Google Android elevation of privilege vulnerability (CNVD-2025-19963)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a memory misreference vulnerability, which stems from a messed up instruction in sdpserver.cc that is responsible for freeing up memory, which can be exploited by an attacker to gain elevated...

Linux Distros Unpatched Vulnerability : CVE-2021-41229

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - BlueZ is a Bluetooth protocol stack for Linux. In affected versions a vulnerability exists in sdpcstateallocbuf which allocates memory which will always be hung...

Linux Distros Unpatched Vulnerability : CVE-2021-39925

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in the Bluetooth SDP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture...

CVE-2025-22411

In processserviceattrrsp of sdpdiscovery.cc, there is a possible use after free due to a logic error in the code. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-22412

In multiple functions of sdpserver.cc, there is a possible use after free due to a logic error in the code. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-22411

In processserviceattrrsp of sdpdiscovery.cc, there is a possible use after free due to a logic error in the code. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-0075

In processservicesearchattrreq of sdpserver.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-22412

In multiple functions of sdpserver.cc, there is a possible use after free due to a logic error in the code. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-22411

In processserviceattrrsp of sdpdiscovery.cc, there is a possible use after free due to a logic error in the code. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-22411

In processserviceattrrsp of sdpdiscovery.cc, there is a possible use after free due to a logic error in the code. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-22403

In sdpsndservicesearchreq of sdpdiscovery.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-22403

CVE-2025-22403 describes a use-after-free in the Android Bluetooth SDP discovery path, specifically in the function and file sdp_snd_service_search_req of sdp_discovery.cc. The issue could allow remote code execution with no privileges and no user interaction, as stated in multiple sources. Publi...

CVE-2025-0075

CVE-2025-0075 is a use-after-free in process_service_search_attr_req of sdp_server.cc that can lead to remote code execution with no privileges or user interaction. Affected software is the Android platform (System component in the 2025-03-01/03 bulletin) and related Android sources describe this...

CVE-2025-0074

In processserviceattrrsp of sdpdiscovery.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a memory misreference vulnerability, which stems from a mix-up in sdpdiscovery.cc in the sdpsndservicesearchreq directive responsible for freeing memory, which can be exploited by an attacker to...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. A code execution vulnerability exists in Google Android due to a free use of processserviceattrrsp in sdpdiscovery.cc. An attacker can exploit the vulnerability to execute arbitrary code on the system...