CVE-2026-0059
HighCVSS 8.0Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
In multiple functions of sdp_discovery.cc, there is a possible way to achieve code execution due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
Risk Assessment
An attacker within Bluetooth range can remotely execute code on the device, leading to full compromise of the Android system.
Recommendation
Apply the security patch from the Android vendor that fixes the heap buffer overflow in sdp_discovery.cc.
Other vulnerabilities in Android Bluetooth stack
Original NVD description (English source)
In multiple functions of sdp_discovery.cc, there is a possible way to achieve code execution due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.