CVE-2023-25747 — A potential use-after-free in libaudio was fixed by disabling the AAudio backend when running on Android API below version 30

Matched remediation archetype

Use-after-free, double free, and expired resource use

This catalog composition supplies bounded fallback guidance. Explicitly reviewed curated workflows load with the complete record below.

Check exposure

• Trace ownership, references, callbacks, asynchronous tasks, and teardown paths around the affected object or resource.
• Identify reachable inputs and timing or state transitions that can release the object while references remain.
• Confirm affected builds, allocators, feature flags, architectures, and process privileges.

Remediate safely

• Apply the maintained ownership or lifetime fix and rebuild all artifacts containing the affected native code.
• Use explicit ownership, safe reference management, cancellation and join semantics, and idempotent teardown.
• Add deterministic lifetime tests plus isolated sanitizer and concurrency coverage for shutdown and error paths.