In bta_hf_client_cb_init of bta_hf_client_main.cc, there is a possible remote code execution due to a use after free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
PoC: Blackash-CVE-2025-48593
CVE-2025-48593
PoC: blueshrimp
Proof-of-concept for CVE-2025-48593
PoC: CVE-2025-48593
"A single malicious packet can own your device." — Android Security Team, Nov 2025
PoC: Blackash-CVE-2025-48593
CVE-2025-48593
PoC: CVE-2025-48593
First public poc for CVE-2025-48593
PoC: CVE-2025-48593
CVE-2025-48593!
PoC: CVE-2025-48593
CVE-2025-48593 Zero-Click Remote Code Execution in Android System
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Get alerted for CVEs like this
Register your stack and get notified within minutes when a matching CVE drops.
Start monitoring free