Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

Android Bluetooth module may let attackers run code

CVE-2024-49748 · published 1 year ago
Summary

The Bluetooth service in Android can be tricked into writing data outside its memory area, which could let a remote attacker execute their own code on the device. No user interaction is required, and the attacker does not need special privileges. Apply the latest Android security updates or patches from Google to fix the issue.

What to do
  • Update google platform/packages/modules/bluetooth to version 15-next:2025-01-01.
  • Update google platform/system/bt to version 12:2025-01-01.
  • Update google platform/system/bt to version 12L:2025-01-01.
  • Update google platform/packages/modules/bluetooth to version 15:2025-01-01.
  • Update google platform/packages/modules/bluetooth to version 13:2025-01-01.
  • Update google platform/packages/modules/bluetooth to version 14:2025-01-01.
Affected software
Ecosystem VendorProductAffected versions
– google android 12.0
12.1
13.0
14.0
15.0
cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*
Android google platform/packages/modules/bluetooth >= 15-next:0, < 15-next:2025-01-01
>= 15:0, < 15:2025-01-01
>= 13:0, < 13:2025-01-01
>= 14:0, < 14:2025-01-01
Fix: upgrade to 15-next:2025-01-01
Android google platform/system/bt >= 12:0, < 12:2025-01-01
>= 12L:0, < 12L:2025-01-01
Fix: upgrade to 12:2025-01-01
Original advisory text
In gatts_process_primary_service_req of gatt_sr.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution priv...
In gatts_process_primary_service_req of gatt_sr.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker full control
Severity
9.8 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-787Out-of-bounds Write
Timeline
Published1 Jan 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2024-49748 · NVD
ASB-A-364025411 · OSV
Track software like this
Free during beta