CVE-2025-48593High· 8.0▾ MidnightPoC availableIn bta_hf_client_cb_init of bta_hf_client_main.cc, there is a possible remote code execution due to a use after free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed…
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 44 · likelihood 0.2 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Public exploit / PoC code seen in 1 source. Availability, not in-the-wild use.
Exploit-prediction probability, daily snapshots since Sep 26.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.9%
4 GitHub repos (last check)
In bta_hf_client_cb_init of bta_hf_client_main.cc, there is a possible remote code execution due to a use after free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
android = 13.0android = 14.0android = 15.0android = 16.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2022-20421High· 7.8In binder_inc_ref_for_node of binder.c, there is a possible way to corrupt memory due to a use after free
CVE-2022-20566High· 7.8In l2cap_chan_put of l2cap_core, there is a possible use after free due to improper locking
CVE-2025-22438High· 7.8In afterKeyEventLockedInterruptable of InputDispatcher.cpp, there is a possible use after free
CVE-2025-20806Medium· 6.7In dpe, there is a possible memory corruption due to use after free
CVE-2025-20804Medium· 6.7In dpe, there is a possible memory corruption due to use after free
CVE-2025-36934High· 7.4In bigo_worker_thread of private/google-modules/video/gchips/bigo.c, there is a possible use after free due to a race condition