Android Audio Service Bluetooth MAC Address Information Disclosure Vulnerability

A vulnerability in the Audio Service component of Android could allow unauthorized access to the MAC addresses of nearby Bluetooth devices. This issue arises from a lack of proper permission checks, potentially leading to a local elevation of privilege. Notably, exploitation of this vulnerability does not require any additional execution privileges or user interaction.

Impact

Exploitation of this vulnerability could result in unauthorized access to Bluetooth MAC addresses of nearby devices, potentially allowing for tracking or other privacy-invasive actions.

Remediation

Users can update their devices to Android 16 with a security patch level of 2025-07-01 or later to address this vulnerability.