Samsung LeAudioService Improper Access Control Vulnerability Allowing Auracast Manipulation

A vulnerability exists in the LeAudioService component of Samsung devices running Android 14 and 15, prior to the July 2025 Security Maintenance Release. This vulnerability allows local attackers to interfere with Auracast broadcasting by manipulating its controls. The issue stems from improper access control, which the July 2025 update has addressed by implementing the necessary access restrictions.

Impact

Exploitation of this vulnerability could disrupt Auracast broadcasting, potentially leading to unauthorized manipulation of audio streaming features.

Remediation

Users can apply the July 2025 Security Maintenance Release to address this vulnerability. This update is part of the regular monthly security patch process and includes all necessary fixes from Samsung and Google.