PT-2025-11064 · Unknown · Adapterservice.Java

Published 2025-03-01 · Updated 2025-08-27 · CVE-2025-0092

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: AdapterService.java (affected versions not specified)

Description: A permission bypass exists due to misleading or insufficient UI in the handleBondStateChanged function of AdapterService.java. This could lead to remote information disclosure without requiring additional execution privileges. User interaction is required for exploitation.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insufficient Verification of Data Authenticity

Weakness Enumeration

CWE-356

CWE-345

Related Identifiers

ASB-A-289375038

CVE-2025-0092

Affected Products

Adapterservice.Java

References · 10

• https://osv.dev/vulnerability/ASB-A-289375038 · Vendor Advisory
• https://source.android.com/security/bulletin/2025-03-01 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-0092 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-0092 · Security Note
• https://reddit.com/r/k12cybersecurity/comments/1j9jwl5/msisac_cybersecurity_advisory_multiple · Reddit Post
• https://twitter.com/CVEnew/status/1960480961415532962 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1960537620640923834 · Twitter Post
• https://android.googlesource.com/platform/packages/modules/Bluetooth/+/090ca53cc13c12e3763777a6a3c7367641e9808f · Note
• https://t.me/CVEtracker/30973 · Telegram Post
• https://t.me/cveNotify/133624 · Telegram Post