Android Bluetooth Stack Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in the Android Bluetooth stack, specifically within the 'gatts_process_read_by_type_req' function of 'gatt_sr.cc'. This vulnerability arises from a logic error that creates a potential out-of-bounds write, allowing for remote code execution without the need for additional execution privileges or user interaction.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected device.

Remediation

Users can update their devices to the January 2025 security patch level to address this vulnerability. Instructions for checking and updating the Android version are available on the Google Support website.