A critical use after free vulnerability in the Android Bluetooth stack allows an attacker to achieve local code execution and escalate privileges.

This is a use after free vulnerability located in the bnepu_check_send_packet function within bnep_utils.cc. The flaw allows for local escalation of privilege, requiring no additional execution privileges or user interaction to trigger.

The vulnerability carries a CVSS score of 8.4, which indicates a high level of severity. Successful exploitation grants an attacker the ability to escalate privileges on the device, potentially leading to a total compromise of system integrity, confidentiality, and availability. This poses a significant risk to organizational data security, especially for mobile devices managed within corporate environments.

Immediate Action: Organizations should monitor the official Google Android Security Bulletin for the release of the corresponding security patch and apply it to all affected Android 15 devices immediately upon availability.

Proactive Monitoring: Security teams should monitor system logs for unusual Bluetooth activity or process crashes that may indicate exploitation attempts targeting the Bluetooth stack.

Compensating Controls: While specific compensating controls for local Bluetooth exploits are limited, maintaining strict device management policies and ensuring that only necessary Bluetooth services are enabled can reduce the overall attack surface.

Public Exploit Available: Unknown.

Given the high CVSS score and the potential for privilege escalation, this vulnerability must be treated with high priority. Administrators should prioritize the deployment of the next scheduled Android security update to ensure that the vulnerable bnep_utils code is patched, thereby preventing potential local exploitation.