CVE-2025-0084

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

In multiple locations, there is a possible out of bounds write due to a use after free. This could lead to remote code execution over Bluetooth, if HFP support is enabled, with no additional execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published: Aug 26, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-00866.2In onResult of AccountManagerService.java, there is a possible way to overwrite auth token due to a missing permission check. This could lea CVE-2025-00875.1In onCreate of UninstallerActivity.java, there is a possible way to uninstall a different user's app due to a missing permission check. This CVE-2025-00897.8In multiple locations, there is a possible way to hijack the Launcher app due to a logic error in the code. This could lead to local escalat CVE-2025-00926.5In handleBondStateChanged of AdapterService.java, there is a possible permission bypass due to misleading or insufficient UI. This could lea CVE-2025-00937.5In handleBondStateChanged of AdapterService.java, there is a possible unapproved data access due to a missing permission check. This could l CVE-2025-01016.5A low privileged user can set the date of the devices to the 19th of January 2038 an therefore exceed the 32-Bit time limit. This causes som CVE-2025-01038.8An SQL injection vulnerability in Palo Alto Networks Expedition enables an authenticated attacker to reveal Expedition database contents, su CVE-2025-01046.1A reflected cross-site scripting (XSS) vulnerability in Palo Alto Networks Expedition enables attackers to execute malicious JavaScript code CVE-2025-01059.1An arbitrary file deletion vulnerability in Palo Alto Networks Expedition enables an unauthenticated attacker to delete arbitrary files acce CVE-2025-01065.3A wildcard expansion vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to enumerate files on the host filesy CVE-2025-01079.8An OS command injection vulnerability in Palo Alto Networks Expedition enables an unauthenticated attacker to run arbitrary OS commands as t CVE-2025-01089.1An authentication bypass in the Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management