A critical use after free vulnerability in the Android Bluetooth stack allows for unauthenticated remote code execution by an adjacent attacker.

This flaw is a use after free error occurring within the process_service_attr_rsp function of sdp_discovery.cc. It allows an unauthenticated, adjacent attacker to achieve remote code execution without requiring user interaction or elevated privileges.

The ability for an unauthenticated attacker to execute arbitrary code on a mobile device presents a severe risk to organizational data and privacy. Given the CVSS score of 8.8, this vulnerability is classified as High severity, as it facilitates full system compromise, data exfiltration, or unauthorized control of the device.

Immediate Action: Update affected Android 15 devices to the latest security patch level as specified in the March 2025 Android Security Bulletin.

Proactive Monitoring: Review device logs for unusual Bluetooth activity or service discovery requests that deviate from standard operational patterns.

Compensating Controls: Disable Bluetooth functionality on devices when not in active use to reduce the attack surface for adjacent threats.

Public Exploit Available: Unknown

This vulnerability represents a significant security risk due to the potential for remote code execution via the Bluetooth protocol. Organizations must prioritize the deployment of the March 2025 Android security updates to all managed devices running Android 15 to mitigate the threat of unauthorized system access.