CVE-2025-38118 Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete

Api.Msrc.Microsoft • December 19, 2025

Share: View original

Information published.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CVE-2025-38118: Bluetooth UAF Vulnerability Fixed in Microsoft Management Microsoft has published information regarding CVE-2025-38118, a use-after-free (UAF) vulnerability affecting Bluetooth management. The issue arises during the removal of advertising monitor completions, potentially impacting users of affected Microsoft products. A patch has been released to address this vulnerability. 1 sources 42

Extracted Entities

CVEs (1)

Platforms (1)