important · Bluetooth — Android
A nearby Bluetooth peer can reach code execution in Android’s Bluetooth process without user interaction.
Affects
Android's system Bluetooth stack on phones, tablets and other Android devices
Crafted SDP data reaches heap-buffer overflows in Android’s request-processing and attribute-building paths, which Google classifies as no-interaction remote code execution.
Detail and 2 sources
Bluetooth radio reachability is required, but we do not know whether the attacker must first pair or establish a connection. Android OSV provides per-version fixes.
This remains Secondary because the published fix was not read for this brief.