PT-2025-11056 · Unknown · Sdp Server

Published 2025-03-01 · Updated 2025-08-27 · CVE-2025-0075

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: sdp server (affected versions not specified)

Description: A use after free issue exists in the process service search attr req function within sdp server.cc. This could lead to remote code execution without requiring additional privileges or user interaction.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Use After Free

Code Injection

Weakness Enumeration

CWE-416

CWE-94

Related Identifiers

ASB-A-375407167

CVE-2025-0075

Affected Products

Sdp Server

References · 10

• https://source.android.com/security/bulletin/2025-03-01 · Vendor Advisory
• https://osv.dev/vulnerability/ASB-A-375407167 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-0075 · Security Note
• https://osv.dev/vulnerability/CVE-2025-0075 · Vendor Advisory
• https://reddit.com/r/k12cybersecurity/comments/1j9jwl5/msisac_cybersecurity_advisory_multiple · Reddit Post
• https://twitter.com/CVEnew/status/1960480969879695585 · Twitter Post
• https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5959f8bcf4efe924b0ba4dbcbfe83e602f0eb0ac · Note
• https://t.me/cveNotify/133615 · Telegram Post
• https://twitter.com/VulnWatchX/status/1960821148725235944 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1960565777540485496 · Twitter Post