Samsung LeAudioService Improper Access Control Vulnerability Allowing Auracast Interruption
Vulnerability
A vulnerability exists in the LeAudioService component of Samsung devices, specifically in versions prior to the July 2025 Security Maintenance Release. This vulnerability allows local attackers to disrupt Auracast broadcasting by improperly managing access controls. The issue arises from a lack of adequate verification, enabling unauthorized manipulation of audio broadcast features.
Impact
Exploitation of this vulnerability allows local attackers to stop Auracast broadcasting, disrupting audio sharing capabilities.
Remediation
Users can apply the July 2025 Security Maintenance Release, which includes the necessary patch for this vulnerability.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.
