Android Bluetooth Auracast Audio Stream Interception Vulnerability

A vulnerability in the Bluetooth LE broadcast feature of Android has been identified, allowing for the interception of Auracast audio streams. This issue arises from an insecure default value in the password generation process, which could lead to remote information disclosure. The vulnerability does not require any additional execution privileges or user interaction for exploitation.

Impact

Exploitation of this vulnerability could result in unauthorized interception of audio streams, leading to potential information disclosure.

Remediation

Users can update their devices to the September 2025 security patch level to address this vulnerability.