{"id":"ASB-A-289811388","details":"In handleBondStateChanged of AdapterService.java, there is a possible unapproved data access due to a missing permission check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.","aliases":["A-289811388","CVE-2025-0093"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2025-03-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2025-03-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/090ca53cc13c12e3763777a6a3c7367641e9808f"}],"affected":[{"package":{"name":"platform/packages/modules/Bluetooth","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15-next:0"},{"fixed":"15-next:2025-03-01"}]}],"versions":["15-next"],"ecosystem_specific":{"spl":"2025-03-01","types":["ID"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/771aed3ea225d9ca2ef91e88f45f330ced952772","target":{"file":"android/app/src/com/android/bluetooth/btservice/AdapterService.java"},"deprecated":false,"digest":{"line_hashes":["90511511724719131925215018654458747684","328640861835376691736958102479025757951","4604599442318127826404222897192213843","166923582262716703749327566635834012439","277246100430995070286525218009120002004","85684725380886847157996831565449166682","114127719858713300539102811389487493189","76703245458864547879356985980065665792"],"threshold":0.9},"id":"ASB-A-289811388-a27e880f","signature_type":"Line"},{"deprecated":false,"digest":{"function_hash":"328496924968262364522595459580258101092","length":1415},"id":"ASB-A-289811388-b05e424f","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/771aed3ea225d9ca2ef91e88f45f330ced952772","target":{"file":"android/app/src/com/android/bluetooth/btservice/AdapterService.java","function":"handleBondStateChanged"}}],"fixes":["https://android.googlesource.com/platform/packages/modules/Bluetooth/+/771aed3ea225d9ca2ef91e88f45f330ced952772"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-289811388.json"}},{"package":{"name":"platform/packages/apps/Bluetooth","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2025-03-01"}]}],"versions":["12"],"ecosystem_specific":{"types":["ID"],"vanir_signatures":[{"digest":{"line_hashes":["184853889957896222110898875606798877732","218761626405373525651807859948576675241","336443943488219447604565784262223601508"],"threshold":0.9},"id":"ASB-A-289811388-11d4c083","match_only_versions":["12"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Bluetooth/+/e3be5a26db30094f034a543ac60e6ff5da497bd7","target":{"file":"src/com/android/bluetooth/btservice/BondStateMachine.java"},"deprecated":false},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Bluetooth/+/e3be5a26db30094f034a543ac60e6ff5da497bd7","target":{"file":"src/com/android/bluetooth/btservice/BondStateMachine.java","function":"sendIntent"},"deprecated":false,"digest":{"function_hash":"50333320920943183786165038602097210095","length":2252},"id":"ASB-A-289811388-740bad96","signature_type":"Function"}],"fixes":["https://android.googlesource.com/platform/packages/apps/Bluetooth/+/e3be5a26db30094f034a543ac60e6ff5da497bd7"],"severity":"High","spl":"2025-03-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-289811388.json"}},{"package":{"name":"platform/packages/apps/Bluetooth","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2025-03-01"}]}],"versions":["12L"],"ecosystem_specific":{"vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"50333320920943183786165038602097210095","length":2252},"id":"ASB-A-289811388-0e4abff9","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Bluetooth/+/e3be5a26db30094f034a543ac60e6ff5da497bd7","target":{"function":"sendIntent","file":"src/com/android/bluetooth/btservice/BondStateMachine.java"}},{"source":"https://android.googlesource.com/platform/packages/apps/Bluetooth/+/e3be5a26db30094f034a543ac60e6ff5da497bd7","target":{"file":"src/com/android/bluetooth/btservice/BondStateMachine.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["184853889957896222110898875606798877732","218761626405373525651807859948576675241","336443943488219447604565784262223601508"]},"id":"ASB-A-289811388-d7b6b80c","match_only_versions":["12L"],"signature_type":"Line","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/packages/apps/Bluetooth/+/e3be5a26db30094f034a543ac60e6ff5da497bd7"],"severity":"High","spl":"2025-03-01","types":["ID"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-289811388.json"}},{"package":{"name":"platform/packages/modules/Bluetooth","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2025-03-01"}]}],"versions":["15"],"ecosystem_specific":{"spl":"2025-03-01","types":["ID"],"vanir_signatures":[{"digest":{"function_hash":"328496924968262364522595459580258101092","length":1415},"id":"ASB-A-289811388-45957354","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/8ef714b803127ca193773c6d032457c01c1963d6","target":{"function":"handleBondStateChanged","file":"android/app/src/com/android/bluetooth/btservice/AdapterService.java"},"deprecated":false},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/8ef714b803127ca193773c6d032457c01c1963d6","target":{"file":"android/app/src/com/android/bluetooth/btservice/AdapterService.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["244649723409037415636836064401038811231","166923582262716703749327566635834012439","277246100430995070286525218009120002004","85684725380886847157996831565449166682","114127719858713300539102811389487493189","76703245458864547879356985980065665792"]},"id":"ASB-A-289811388-c4cfdac6","signature_type":"Line"}],"fixes":["https://android.googlesource.com/platform/packages/modules/Bluetooth/+/8ef714b803127ca193773c6d032457c01c1963d6"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-289811388.json"}},{"package":{"name":"platform/packages/modules/Bluetooth","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2025-03-01"}]}],"versions":["13"],"ecosystem_specific":{"spl":"2025-03-01","types":["ID"],"vanir_signatures":[{"deprecated":false,"digest":{"line_hashes":["184853889957896222110898875606798877732","218761626405373525651807859948576675241","336443943488219447604565784262223601508"],"threshold":0.9},"id":"ASB-A-289811388-a5616fb1","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/038b1e8626399ff3f374d5af987e3efd64a19321","target":{"file":"android/app/src/com/android/bluetooth/btservice/BondStateMachine.java"}},{"source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/038b1e8626399ff3f374d5af987e3efd64a19321","target":{"file":"android/app/src/com/android/bluetooth/btservice/BondStateMachine.java","function":"sendIntent"},"deprecated":false,"digest":{"function_hash":"139816909304504134873004530762090686032","length":2646},"id":"ASB-A-289811388-eee81fec","signature_type":"Function","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/packages/modules/Bluetooth/+/038b1e8626399ff3f374d5af987e3efd64a19321"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-289811388.json"}},{"package":{"name":"platform/packages/modules/Bluetooth","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2025-03-01"}]}],"versions":["14"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/modules/Bluetooth/+/038b1e8626399ff3f374d5af987e3efd64a19321"],"severity":"High","spl":"2025-03-01","types":["ID"],"vanir_signatures":[{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/038b1e8626399ff3f374d5af987e3efd64a19321","target":{"function":"sendIntent","file":"android/app/src/com/android/bluetooth/btservice/BondStateMachine.java"},"deprecated":false,"digest":{"function_hash":"139816909304504134873004530762090686032","length":2646},"id":"ASB-A-289811388-3b85e605"},{"target":{"file":"android/app/src/com/android/bluetooth/btservice/BondStateMachine.java"},"deprecated":false,"digest":{"line_hashes":["184853889957896222110898875606798877732","218761626405373525651807859948576675241","336443943488219447604565784262223601508"],"threshold":0.9},"id":"ASB-A-289811388-bd1cfe37","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/038b1e8626399ff3f374d5af987e3efd64a19321"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-289811388.json"}}],"schema_version":"1.9.0"}