CVE-2025-48530

CVSS 8.1 HIGHEPSS 0.5%CWE-125

Vexday Risk Score

21Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 8.1EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

04 sep 2025Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

In multiple locations, there is a possible condition that results in OOB accesses due to an incorrect bounds check. This could lead to remote code execution in combination with other bugs, with no additional execution privileges needed. User interaction is not needed for exploitation.

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Productos afectados

Google · Android

Referencias

https://source.android.com/security/bulletin/2025-08-01