{"id":148495,"date":"2025-11-15T23:11:59","date_gmt":"2025-11-15T21:11:59","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/udalyonno-ekspluatiruemaya-uzvimost-v-bluetooth-steke-platformy-android"},"modified":"2025-11-15T23:11:59","modified_gmt":"2025-11-15T21:11:59","slug":"udalyonno-ekspluatiruemaya-uzvimost-v-bluetooth-steke-platformy-android","status":"publish","type":"post","link":"https:\/\/prohoster.info\/lv\/blog\/news\/udalyonno-ekspluatiruemaya-uzvimost-v-bluetooth-steke-platformy-android","title":{"rendered":"Att\u0101lin\u0101ti ekspluat\u0113jama ievainojam\u012bba Android platformas Bluetooth st\u0101vokl\u012b","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Novembra dro\u0161\u012bbas bi\u013ceten\u0101 Android tika public\u0113ta inform\u0101cija par ievainojam\u012bbu CVE-2025-48593 Bluetooth apak\u0161sist\u0113m\u0101, kas ietekm\u0113 Android versijas no 13 l\u012bdz 16. Ievainojumam pie\u0161\u0137irta kritiska b\u012bstam\u012bbas pak\u0101pe (9.8 no 10), jo tas var novest pie att\u0101lin\u0101tas koda izpildes, apstr\u0101d\u0101jot \u012bpa\u0161i sagatavotus Bluetooth paketus. <\/p>\n

Google pagaid\u0101m nav sniegusi detaliz\u0113tu inform\u0101ciju par ievainojam\u012bbu, ta\u010du neatkar\u012bgie p\u0113tnieki apgalvo, ka probl\u0113ma neietekm\u0113 parastus viedt\u0101lru\u0146us un attiecas tikai uz Bluetooth ier\u012bc\u0113m, kas sp\u0113j darboties k\u0101 ska\u013crunis, piem\u0113ram, vied\u0101s kolonnas, viedpulkste\u0146i un automobi\u013cu inform\u0101cijas un izklaides sist\u0113mas. Lai to izmantotu, lietot\u0101jam j\u0101veic savu ier\u012b\u010du savieno\u0161ana ar uzbruc\u0113ja ier\u012bci, t.i., lai aptur\u0113tu probl\u0113mu, pietiek nesniegt ap\u0161aub\u0101mus savieno\u0161anas piepras\u012bjumus (Google bi\u013ceten\u0101 min\u0113ts, ka, lai to izmantotu, lietot\u0101jam nav nepiecie\u0161ams veikt nek\u0101das darb\u012bbas). <\/p>\n

Labojumi ietver aicin\u0101juma pievieno\u0161anu, lai p\u0101rbaud\u012btu Discovery Database esam\u012bbu, izmantojot Bluetooth Handsfree profilu, un apst\u0101din\u0101tu mekl\u0113\u0161anu ar SDR (Service Discovery Protocol), k\u0101 ar\u012b p_disc_db strukt\u016bras (\"discovery database\") atiestat\u012b\u0161anu un t\u012br\u012b\u0161anu. Noteiktas darb\u012bbas tiek veiktas, lai atgrieztu k\u013c\u016bdas un atjaunotu savienojumus Bluetooth pakalpojuma noteik\u0161anas un mijiedarb\u012bbas saska\u0146o\u0161anas proces\u0101. serveris<\/a> ar klientu noved pie piek\u013cuves jau atbr\u012bvotai atmi\u0146as zona (use-after-free). <\/p>\n

Labojums jau ir iek\u013cauts LineageOS koda b\u0101z\u0113. Pieejams agr\u012bns exploita prototips, kas izraisa av\u0101rijas p\u0101rtrauk\u0161anu, kad Android tiek palaists \u012bpa\u0161\u0101 emulator\u0101. T\u012bkl\u0101 ar\u012b nov\u0113rotas m\u0113\u0123in\u0101jumi p\u0101rdot str\u0101d\u0101jo\u0161u exploitu, ta\u010du, sprie\u017eot p\u0113c visa, t\u0101s ir m\u0113\u0123in\u0101jumi izplat\u012bt kait\u012bgu programmat\u016bru vai p\u0101rdot viltus produktus kr\u0101pniekiem. <\/p>\n

Papildus \u0161ai ievainojam\u012bbai, novembra Android atjaunin\u0101jum\u0101 ir nov\u0113rsta ievainojam\u012bba CVE-2025-48581, kas izraisa privil\u0113\u0123iju palielin\u0101\u0161anu. Probl\u0113ma ietekm\u0113 tikai Android 16 un ir mar\u0137\u0113ta k\u0101 b\u012bstama. Ievainojam\u012bbas c\u0113lonis ir lo\u0123ikas k\u013c\u016bda funkcij\u0101 VerifyNoOverlapInSessions fail\u0101 apexd.cpp, kas \u013cauj blo\u0137\u0113t atjaunin\u0101jumu instal\u0101ciju ar dro\u0161\u012bbas probl\u0113mu labojumiem. Tiek nor\u0101d\u012bts, ka ievainojam\u012bbu var izmantot lok\u0101las privile\u0123iju palielin\u0101\u0161anas uzbrukumam. Lai veiktu uzbrukumu, nav nepiecie\u0161amas lietot\u0101ja darb\u012bbas.
\n
Avots: opennet.lv<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043d\u043e\u044f\u0431\u0440\u044c\u0441\u043a\u043e\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Android \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-48593 \u0432 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 Bluetooth, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 Android \u0441 13 \u043f\u043e 16. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (9.8 \u0438\u0437 10) \u0442\u0430\u043a \u043a\u0430\u043a \u043e\u043d\u0430 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 Bluetooth-\u043f\u0430\u043a\u0435\u0442\u043e\u0432. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u043e\u043a\u0430 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u043e \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0442, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-148495","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Att\u0101lin\u0101ti izmantojama ievainojam\u012bba Android platformas Bluetooth steka | ProHoster","description":"Novembra Android dro\u0161\u012bbas zi\u0146ojum\u0101 public\u0113ta inform\u0101cija par ievainojam\u012bbu CVE-2025-48593 Bluetooth apak\u0161sist\u0113m\u0101, kas ietekm\u0113 Android versijas no 13 l\u012bdz 16.","canonical_url":"https:\/\/prohoster.info\/lv\/blog\/news\/udalyonno-ekspluatiruemaya-uzvimost-v-bluetooth-steke-platformy-android","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"lv_LV","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0430\u044f \u0443\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Bluetooth-\u0441\u0442\u0435\u043a\u0435 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Android | ProHoster","og:description":"\u0412 \u043d\u043e\u044f\u0431\u0440\u044c\u0441\u043a\u043e\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Android \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-48593 \u0432 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 Bluetooth, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 Android \u0441 13 \u043f\u043e 16.","og:url":"https:\/\/prohoster.info\/lv\/blog\/news\/udalyonno-ekspluatiruemaya-uzvimost-v-bluetooth-steke-platformy-android","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-11-15T21:11:59+00:00","article:modified_time":"2025-11-15T21:11:59+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"148495","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-22 15:55:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 15:59:20","updated":"2026-02-22 15:55:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/148495","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/comments?post=148495"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/148495\/revisions"}],"predecessor-version":[{"id":162519,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/148495\/revisions\/162519"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/media?parent=148495"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/categories?post=148495"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/tags?post=148495"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}