{"id":148495,"date":"2025-11-15T23:11:59","date_gmt":"2025-11-15T21:11:59","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/udalyonno-ekspluatiruemaya-uzvimost-v-bluetooth-steke-platformy-android"},"modified":"2025-11-15T23:11:59","modified_gmt":"2025-11-15T21:11:59","slug":"udalyonno-ekspluatiruemaya-uzvimost-v-bluetooth-steke-platformy-android","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/udalyonno-ekspluatiruemaya-uzvimost-v-bluetooth-steke-platformy-android","title":{"rendered":"Nj\u00eb dob\u00ebsi e shfryt\u00ebzueshme n\u00eb kuadrin Bluetooth t\u00eb platform\u00ebs Android","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

N\u00eb buletinin e siguris\u00eb p\u00ebr n\u00ebntorin, \u00ebsht\u00eb publikuar informacion mbi vulnerabilitetin CVE-2025-48593 n\u00eb n\u00ebn-sistemin Bluetooth, i cili prek versionet e Android nga 13 deri n\u00eb 16. Vulnerabiliteti ka marr\u00eb nj\u00eb nivel kritik rreziku (9.8 nga 10) pasi mund t\u00eb \u00e7oj\u00eb n\u00eb ekzekutimin e kodit n\u00eb distanc\u00eb gjat\u00eb p\u00ebrpunimit t\u00eb paketave Bluetooth t\u00eb dizajnuara posa\u00e7\u00ebrisht. <\/p>\n

Kompania Google ende nuk ka publikuar nj\u00eb p\u00ebrshkrim t\u00eb detajuar t\u00eb vulnerabilitetit, por hulumtuesit e pavarur pretendojn\u00eb se problemi nuk prek smartphone-t e zakonsh\u00ebm dhe \u00ebsht\u00eb i lidhur vet\u00ebm me pajisjet Bluetooth q\u00eb mund t\u00eb veprojn\u00eb si altoparlant\u00eb, si\u00e7 jan\u00eb kolonat inteligente, or\u00ebt inteligjente dhe sistemet e infotainment n\u00eb automobila. P\u00ebr t\u00eb shfryt\u00ebzuar ndodhin e k\u00ebrkohet q\u00eb p\u00ebrdoruesi t\u00eb lidh\u00eb pajisjen e tij me pajisjen e sulmuesit, pra p\u00ebr t\u00eb bllokuar problemin mjafton t\u00eb mos pranohet k\u00ebrkesat e dyshimta p\u00ebr lidhje (n\u00eb buletinin e Google p\u00ebrmendet se p\u00ebr shfryt\u00ebzimin e saj nuk jan\u00eb t\u00eb nevojshme veprime nga p\u00ebrdoruesi). <\/p>\n

Korrigjimi p\u00ebrfshin shtimin e thirrjes p\u00ebr t\u00eb kontrolluar ekzistenc\u00ebn e Baza t\u00eb t\u00eb Dh\u00ebnave Discovery gjat\u00eb pun\u00ebs me profilin Bluetooth Handsfree dhe ndalimin e k\u00ebrkimit t\u00eb peer-eve duke p\u00ebrdorur protokollin SDP (Protokolli i Zbulimit t\u00eb Sh\u00ebrbimeve), si dhe rikthimin dhe pastrimin e struktur\u00ebs p_disc_db (\"baza e t\u00eb dh\u00ebnave t\u00eb zbulimit\"). Manipulime t\u00eb caktuara p\u00ebr kthimin e gabimeve dhe rinovimin e lidhjeve gjat\u00eb procesit t\u00eb p\u00ebrcaktimit t\u00eb sh\u00ebrbimit Bluetooth dhe pajtimit t\u00eb nd\u00ebrveprimit. server\u00eb<\/a> Manipulimet me sh\u00ebrbimin \u00e7ojn\u00eb n\u00eb aksesin e nj\u00eb zone t\u00eb liruar m\u00eb par\u00eb (use-after-free). <\/p>\n

Riparimi tashm\u00eb \u00ebsht\u00eb transferuar n\u00eb kodin e baz\u00ebs s\u00eb LineageOS. Nj\u00eb prototip i hersh\u00ebm i nj\u00eb eksploiti \u00ebsht\u00eb n\u00eb dispozicion, i cili shkakton nj\u00eb d\u00ebshtim gjat\u00eb nisjes s\u00eb Android n\u00eb nj\u00eb emulator t\u00eb ve\u00e7ant\u00eb. N\u00eb rrjet jan\u00eb v\u00ebrejtur gjithashtu p\u00ebrpjekje p\u00ebr t\u00eb shitur nj\u00eb exploit funksional, por duket se k\u00ebto jan\u00eb p\u00ebrpjekje p\u00ebr shp\u00ebrndarjen e softuerit t\u00eb keq ose shitjen e nj\u00eb boshti nga mashtruesit. <\/p>\n

P\u00ebrve\u00e7 k\u00ebsaj dob\u00ebsie, p\u00ebrdit\u00ebsimi i n\u00ebntorit t\u00eb Android p\u00ebrmban nj\u00eb rregullim p\u00ebr dob\u00ebsin\u00eb CVE-2025-48581, e cila mund\u00ebson nj\u00eb rritje t\u00eb privilegjeve. Problemi prek vet\u00ebm Android 16 dhe sh\u00ebnohet si i rreziksh\u00ebm. Shkaku i dob\u00ebsis\u00eb \u00ebsht\u00eb nj\u00eb gabim logjik n\u00eb funksionin VerifyNoOverlapInSessions nga skedari apexd.cpp, i cili lejon bllokimin e instalimit t\u00eb p\u00ebrdit\u00ebsimeve me rregullimin e problemeve t\u00eb siguris\u00eb. Raportohet se kjo dob\u00ebsi mund t\u00eb p\u00ebrdoret p\u00ebr nj\u00eb rritje lokale t\u00eb privilegjeve. P\u00ebr t\u00eb kryer nj\u00eb sulm, nuk k\u00ebrkohet veprim nga p\u00ebrdoruesi.
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043d\u043e\u044f\u0431\u0440\u044c\u0441\u043a\u043e\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Android \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-48593 \u0432 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 Bluetooth, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 Android \u0441 13 \u043f\u043e 16. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (9.8 \u0438\u0437 10) \u0442\u0430\u043a \u043a\u0430\u043a \u043e\u043d\u0430 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 Bluetooth-\u043f\u0430\u043a\u0435\u0442\u043e\u0432. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u043e\u043a\u0430 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u043e \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0442, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-148495","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Dob\u00ebsia e shfryt\u00ebzueshme n\u00eb distanc\u00eb n\u00eb stakun Bluetooth t\u00eb platform\u00ebs Android | ProHoster","description":"N\u00eb buletinin e siguris\u00eb n\u00ebntor, \u00ebsht\u00eb publikuar informacion n\u00eb lidhje me dob\u00ebsin\u00eb CVE-2025-48593 n\u00eb n\u00ebn-sistemin Bluetooth, i cili prek versionet e Android nga 13 n\u00eb 16.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/udalyonno-ekspluatiruemaya-uzvimost-v-bluetooth-steke-platformy-android","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0430\u044f \u0443\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Bluetooth-\u0441\u0442\u0435\u043a\u0435 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Android | ProHoster","og:description":"\u0412 \u043d\u043e\u044f\u0431\u0440\u044c\u0441\u043a\u043e\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Android \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-48593 \u0432 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 Bluetooth, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 Android \u0441 13 \u043f\u043e 16.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/udalyonno-ekspluatiruemaya-uzvimost-v-bluetooth-steke-platformy-android","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-11-15T21:11:59+00:00","article:modified_time":"2025-11-15T21:11:59+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"148495","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-22 15:55:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 15:59:20","updated":"2026-02-22 15:55:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/148495","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=148495"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/148495\/revisions"}],"predecessor-version":[{"id":162519,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/148495\/revisions\/162519"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=148495"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=148495"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=148495"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}