Android Bluetooth Stack Heap Buffer Overflow Vulnerability Allowing Remote Code Execution

A heap buffer overflow vulnerability has been identified in the Android Bluetooth stack, specifically in the function 'gatts_process_primary_service_req' of 'gatt_sr.cc'. This vulnerability allows for an out-of-bounds write, which could be exploited to execute remote code without requiring any additional privileges or user interaction.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution on the affected device.

Remediation

Users can update their devices to the January 2025 security patch level to address this vulnerability. Instructions for checking and updating the Android version are available on the Google Support website.