{"id":148495,"date":"2025-11-15T23:11:59","date_gmt":"2025-11-15T21:11:59","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/udalyonno-ekspluatiruemaya-uzvimost-v-bluetooth-steke-platformy-android"},"modified":"2025-11-15T23:11:59","modified_gmt":"2025-11-15T21:11:59","slug":"udalyonno-ekspluatiruemaya-uzvimost-v-bluetooth-steke-platformy-android","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/udalyonno-ekspluatiruemaya-uzvimost-v-bluetooth-steke-platformy-android","title":{"rendered":"T\u00e1volr\u00f3l kihaszn\u00e1lhat\u00f3 sebezhet\u0151s\u00e9g az Android platform Bluetooth stack-j\u00e9ben","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

A novemberi Android biztons\u00e1gi h\u00edrlev\u00e9lben megjelent inform\u00e1ci\u00f3 a CVE-2025-48593 sebezhet\u0151s\u00e9gr\u0151l a Bluetooth alrendszer\u00e9ben, amely a 13-t\u00f3l 16-ig terjed\u0151 Android verzi\u00f3kat \u00e9rinti. A sebezhet\u0151s\u00e9g kritikus vesz\u00e9lyess\u00e9gi szintet kapott (9.8 a 10-b\u0151l), mivel t\u00e1voli k\u00f3dv\u00e9grehajt\u00e1shoz vezethet kifejezetten form\u00e1zott Bluetooth csomagok feldolgoz\u00e1sa sor\u00e1n. <\/p>\n

A Google jelenleg nem k\u00f6z\u00f6l r\u00e9szletes le\u00edr\u00e1st a sebezhet\u0151s\u00e9gr\u0151l, de f\u00fcggetlen kutat\u00f3k \u00e1ll\u00edtj\u00e1k, hogy a probl\u00e9ma nem \u00e9rinti a hagyom\u00e1nyos okostelefonokat, \u00e9s csak azokat a Bluetooth-eszk\u00f6z\u00f6ket \u00e9rinti, amelyek k\u00e9pesek hangsz\u00f3r\u00f3k\u00e9nt m\u0171k\u00f6dni, mint p\u00e9ld\u00e1ul okos hangsz\u00f3r\u00f3k, okos \u00f3r\u00e1k \u00e9s aut\u00f3s infotainment rendszerek. A kihaszn\u00e1l\u00e1shoz sz\u00fcks\u00e9ges, hogy a felhaszn\u00e1l\u00f3 p\u00e1ros\u00edtsa eszk\u00f6z\u00e9t a t\u00e1mad\u00f3 eszk\u00f6z\u00e9vel, teh\u00e1t a probl\u00e9ma megker\u00fcl\u00e9s\u00e9hez elegend\u0151, ha nem fogad el gyan\u00fas p\u00e1ros\u00edt\u00e1si k\u00e9r\u00e9seket (a Google h\u00edrlevel\u00e9ben eml\u00edtve van, hogy a kihaszn\u00e1l\u00e1shoz nem sz\u00fcks\u00e9ges a felhaszn\u00e1l\u00f3 r\u00e9sz\u00e9r\u0151l akt\u00edv cselekv\u00e9s). <\/p>\n

A hibajav\u00edt\u00e1s a Bluetooth Handsfree profil m\u0171k\u00f6d\u00e9se k\u00f6zben a Discovery Database l\u00e9tez\u00e9s\u00e9nek ellen\u0151rz\u00e9s\u00e9re vonatkoz\u00f3 h\u00edv\u00e1s hozz\u00e1ad\u00e1s\u00e1ra, valamint a SDP (Service Discovery Protocol) protokoll haszn\u00e1lat\u00e1val t\u00f6rt\u00e9n\u0151 p\u00e1rok keres\u00e9s\u00e9nek le\u00e1ll\u00edt\u00e1s\u00e1ra, tov\u00e1bb\u00e1 a p_disc_db («discovery database») strukt\u00fara vissza\u00e1ll\u00edt\u00e1s\u00e1ra \u00e9s t\u00f6rl\u00e9s\u00e9re vonatkozik. Bizonyos manipul\u00e1ci\u00f3k zajlanak a hib\u00e1k vissza\u00e1ll\u00edt\u00e1sa \u00e9s a kapcsolat \u00fajraind\u00edt\u00e1sa sor\u00e1n a Bluetooth szolg\u00e1ltat\u00e1s meghat\u00e1roz\u00e1sa \u00e9s az interakci\u00f3k \u00f6sszehangol\u00e1sa folyamat\u00e1ban. a szerver<\/a> a klienssel m\u00e1r felszabad\u00edtott mem\u00f3riater\u00fclethez (use-after-free) vezetnek. <\/p>\n

A jav\u00edt\u00e1st m\u00e1r \u00e1tvitt\u00e9k a LineageOS k\u00f3dalapj\u00e1ba. Kaphat\u00f3 egy korai protot\u00edpus exploit, amely \u00f6sszeoml\u00e1st okoz az Android ind\u00edt\u00e1sa sor\u00e1n egy speci\u00e1lis emul\u00e1torban. Az interneten is megfigyeltek olyan k\u00eds\u00e9rleteket, amelyek m\u0171k\u00f6d\u0151 exploit \u00e9rt\u00e9kes\u00edt\u00e9s\u00e9re ir\u00e1nyulnak, de \u00fagy t\u0171nik, ezek rosszindulat\u00fa szoftverek elterjeszt\u00e9s\u00e9re vagy csal\u00f3k \u00e1ltal \u00e9rt\u00e9kes\u00edtett hamis\u00edtv\u00e1nyokra vonatkoznak. <\/p>\n

A novemberi Android-friss\u00edt\u00e9sben a CVE-2025-48581 sebezhet\u0151s\u00e9g jav\u00edt\u00e1sa is tal\u00e1lhat\u00f3, amely jogosults\u00e1gok emel\u00e9s\u00e9hez vezet. A probl\u00e9ma kiz\u00e1r\u00f3lag az Android 16-ot \u00e9rinti, \u00e9s vesz\u00e9lyesnek min\u0151s\u00fcl. A sebezhet\u0151s\u00e9g oka egy logikai hiba az apexd.cpp f\u00e1jl VerifyNoOverlapInSessions f\u00fcggv\u00e9ny\u00e9ben, amely lehet\u0151v\u00e9 teszi a biztons\u00e1gi probl\u00e9m\u00e1kat jav\u00edt\u00f3 friss\u00edt\u00e9sek telep\u00edt\u00e9s\u00e9nek blokkol\u00e1s\u00e1t. Megjegyzik, hogy a sebezhet\u0151s\u00e9get helyi jogosults\u00e1gemel\u00e9sre is fel lehet haszn\u00e1lni. A t\u00e1mad\u00e1shoz felhaszn\u00e1l\u00f3i m\u0171veletek v\u00e9grehajt\u00e1sa nem sz\u00fcks\u00e9ges.
\n
Forr\u00e1s: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043d\u043e\u044f\u0431\u0440\u044c\u0441\u043a\u043e\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Android \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-48593 \u0432 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 Bluetooth, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 Android \u0441 13 \u043f\u043e 16. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (9.8 \u0438\u0437 10) \u0442\u0430\u043a \u043a\u0430\u043a \u043e\u043d\u0430 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 Bluetooth-\u043f\u0430\u043a\u0435\u0442\u043e\u0432. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u043e\u043a\u0430 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u043e \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0442, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-148495","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47T\u00e1volr\u00f3l kihaszn\u00e1lhat\u00f3 sebezhet\u0151s\u00e9g az Android platform Bluetooth stack-j\u00e9ben | ProHoster","description":"A novemberi Android biztons\u00e1gi k\u00f6zlem\u00e9nyben k\u00f6zz\u00e9tett\u00e9k a Bluetooth alrendszert \u00e9rint\u0151 CVE-2025-48593 sebezhet\u0151s\u00e9gr\u0151l sz\u00f3l\u00f3 inform\u00e1ci\u00f3t, amely az Android 13-16 verzi\u00f3it \u00e9rinti.","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/udalyonno-ekspluatiruemaya-uzvimost-v-bluetooth-steke-platformy-android","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0430\u044f \u0443\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Bluetooth-\u0441\u0442\u0435\u043a\u0435 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Android | ProHoster","og:description":"\u0412 \u043d\u043e\u044f\u0431\u0440\u044c\u0441\u043a\u043e\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Android \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-48593 \u0432 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 Bluetooth, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 Android \u0441 13 \u043f\u043e 16.","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/udalyonno-ekspluatiruemaya-uzvimost-v-bluetooth-steke-platformy-android","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-11-15T21:11:59+00:00","article:modified_time":"2025-11-15T21:11:59+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"148495","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-22 15:55:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 15:59:20","updated":"2026-02-22 15:55:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/148495","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=148495"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/148495\/revisions"}],"predecessor-version":[{"id":162519,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/148495\/revisions\/162519"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=148495"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=148495"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=148495"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}