CVE-2025-26441
Description
In add_attr of sdp_discovery.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CWE
- CWE-125 — CWE-125 Out-of-bounds Read
Affected
- Google / Android — v=15 [affected]; v=14 [affected]; v=13 [affected]
CVSS
- (none)
References
- https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5e3953251ab50bcdb6058f5e5afc82d6271c6e1e
- https://source.android.com/security/bulletin/2025-06-01
Source
cvelistV5-main/cves/2025/26xxx/CVE-2025-26441.json