PT-2025-36016 · Unknown · Sdp Discovery.Cc

Published 2025-06-01 · Updated 2025-09-04 · CVE-2025-26441

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions sdp discovery.cc (affected versions not specified)

Description An out-of-bounds read issue exists in the add attr function of sdp discovery.cc due to a missing bounds check. This could lead to remote information disclosure and does not require additional execution privileges or user interaction for exploitation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

ASB-A-367274727

CVE-2025-26441

Affected Products

Sdp Discovery.Cc

References · 6

• https://osv.dev/vulnerability/ASB-A-367274727 · Vendor Advisory
• https://source.android.com/security/bulletin/2025-06-01 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-26441 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-26441 · Security Note
• https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5e3953251ab50bcdb6058f5e5afc82d6271c6e1e · Patch
• https://twitter.com/CVEnew/status/1963655959533736318 · Twitter Post