A use-after-free vulnerability exists in the function bta_hf_client_cb_init within bta_hf_client_main.cc. This flaw can be exploited remotely without user interaction and does not require additional privileges, potentially allowing remote code execution.