Skip to content
OpenAdvisories
Medium · 4.3 CVE-2025-48571 EUVD-2025-210213GHSA-6w9x-gqpr-3fjh

In multiple functions of btm_sec.cc, there is a possible way for an attacker to intercept SMS messages due to a logic error in the code. Th…

Published Jun 17, 2026 · Updated Jun 17, 2026 · Assigned by google_android

Description

In multiple functions of btm_sec.cc, there is a possible way for an attacker to intercept SMS messages due to a logic error in the code. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android 17 —

Advisories 1

References