{"id":148495,"date":"2025-11-15T23:11:59","date_gmt":"2025-11-15T21:11:59","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/udalyonno-ekspluatiruemaya-uzvimost-v-bluetooth-steke-platformy-android"},"modified":"2025-11-15T23:11:59","modified_gmt":"2025-11-15T21:11:59","slug":"udalyonno-ekspluatiruemaya-uzvimost-v-bluetooth-steke-platformy-android","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/news\/udalyonno-ekspluatiruemaya-uzvimost-v-bluetooth-steke-platformy-android","title":{"rendered":"Fj\u00e4rrutnyttjad s\u00e5rbarhet i Androids Bluetooth-stapel","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

I novemberbulletinen f\u00f6r s\u00e4kerhet p\u00e5 Android publicerades information om s\u00e5rbarheten CVE-2025-48593 i Bluetooth-subsystemet, som p\u00e5verkar versioner av Android fr\u00e5n 13 till 16. S\u00e5rbarheten har tilldelats en kritisk riskniv\u00e5 (9,8 av 10) eftersom den kan leda till fj\u00e4rrkodexekvering vid bearbetning av speciellt utformade Bluetooth-paket. <\/p>\n

Google har \u00e4nnu inte avsl\u00f6jat n\u00e5gra detaljer om s\u00e5rbarheten, men oberoende forskare h\u00e4vdar att problemet inte p\u00e5verkar vanliga smartphones och endast ber\u00f6r Bluetooth-enheter som kan fungera som h\u00f6gtalare, s\u00e5som smarta h\u00f6gtalare, smartklockor och bilens infotainmentsystem. F\u00f6r att utnyttja s\u00e5rbarheten kr\u00e4vs att anv\u00e4ndaren paras ihop sitt enhet med angriparens enhet, det vill s\u00e4ga f\u00f6r att blockera problemet tillr\u00e4ckligt \u00e4r det bara att inte acceptera tveksamma anslutningsf\u00f6rfr\u00e5gningar (i Google-bulletinen n\u00e4mns det att anv\u00e4ndaren inte beh\u00f6ver vidta n\u00e5gra \u00e5tg\u00e4rder f\u00f6r att utnyttja s\u00e5rbarheten). <\/p>\n

Korrigeringen handlar om att l\u00e4gga till ett anrop f\u00f6r att kontrollera existensen av Discovery Database n\u00e4r man arbetar med Bluetooth-profilen Handsfree och stoppa s\u00f6kningen av peers med hj\u00e4lp av SDP (Service Discovery Protocol), samt att \u00e5terst\u00e4lla och rensa strukturen p_disc_db (\"discovery database\"). Vissa \u00e5tg\u00e4rder f\u00f6r att \u00e5terf\u00f6ra fel och \u00e5teruppta anslutningar under processen f\u00f6r identifiering av Bluetooth-tj\u00e4nsten och \u00f6verenskommelse om samverkan. servern<\/a> \u00c5tg\u00e4rden har redan \u00f6verf\u00f6rts till kodbasen f\u00f6r LineageOS. En tidig prototyp av en exploit \u00e4r tillg\u00e4nglig, som orsakar en krasch vid start av Android i en speciell emulator. Det har ocks\u00e5 observerats f\u00f6rs\u00f6k till f\u00f6rs\u00e4ljning av en fungerande exploit p\u00e5 n\u00e4tet, men det verkar vara f\u00f6rs\u00f6k att sprida skadlig programvara eller f\u00f6rs\u00e4lja bluffprodukter av bedragare. <\/p>\n

Fixen har redan \u00f6verf\u00f6rts till kodbasen f\u00f6r LineageOS. En tidig prototyp av en exploit \u00e4r tillg\u00e4nglig, som orsakar en krasch vid start av Android i en speciell emulator. Det har ocks\u00e5 observerats f\u00f6rs\u00f6k att s\u00e4lja fungerande exploits i n\u00e4tet, men det tycks vara bedragare som f\u00f6rs\u00f6ker sprida skadlig programvara eller s\u00e4lja fiktiva produkter. <\/p>\n

F\u00f6rutom denna s\u00e5rbarhet inneh\u00e5ller novembers uppdatering av Android en \u00e5tg\u00e4rd f\u00f6r s\u00e5rbarheten CVE-2025-48581, som leder till f\u00f6rh\u00f6jda privilegier. Problemet p\u00e5verkar endast Android 16 och \u00e4r m\u00e4rkt som kritiskt. Orsaken till s\u00e5rbarheten \u00e4r ett logiskt fel i funktionen VerifyNoOverlapInSessions fr\u00e5n filen apexd.cpp, vilket g\u00f6r det m\u00f6jligt att blockera installationen av uppdateringar som \u00e5tg\u00e4rdar s\u00e4kerhetsproblem. Det noteras att s\u00e5rbarheten kan utnyttjas f\u00f6r lokal privilegief\u00f6rh\u00f6jning. F\u00f6r att utf\u00f6ra attacken kr\u00e4vs det inga \u00e5tg\u00e4rder fr\u00e5n anv\u00e4ndaren.
\n
K\u00e4lla: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043d\u043e\u044f\u0431\u0440\u044c\u0441\u043a\u043e\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Android \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-48593 \u0432 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 Bluetooth, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 Android \u0441 13 \u043f\u043e 16. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (9.8 \u0438\u0437 10) \u0442\u0430\u043a \u043a\u0430\u043a \u043e\u043d\u0430 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 Bluetooth-\u043f\u0430\u043a\u0435\u0442\u043e\u0432. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u043e\u043a\u0430 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u043e \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0442, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-148495","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Fj\u00e4rrutnyttjad s\u00e5rbarhet i Androids Bluetooth-stapel | ProHoster","description":"I novembers s\u00e4kerhetsbulletin f\u00f6r Android publicerades information om s\u00e5rbarheten CVE-2025-48593 i Bluetooth-systemet, som p\u00e5verkar versioner av Android fr\u00e5n 13 till 16.","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/news\/udalyonno-ekspluatiruemaya-uzvimost-v-bluetooth-steke-platformy-android","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0430\u044f \u0443\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Bluetooth-\u0441\u0442\u0435\u043a\u0435 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Android | ProHoster","og:description":"\u0412 \u043d\u043e\u044f\u0431\u0440\u044c\u0441\u043a\u043e\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Android \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-48593 \u0432 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 Bluetooth, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 Android \u0441 13 \u043f\u043e 16.","og:url":"https:\/\/prohoster.info\/sv\/blog\/news\/udalyonno-ekspluatiruemaya-uzvimost-v-bluetooth-steke-platformy-android","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-11-15T21:11:59+00:00","article:modified_time":"2025-11-15T21:11:59+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"148495","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-22 15:55:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 15:59:20","updated":"2026-02-22 15:55:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/148495","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=148495"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/148495\/revisions"}],"predecessor-version":[{"id":162519,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/148495\/revisions\/162519"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=148495"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=148495"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=148495"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}