CVEvulnerability

CVE-2025-48603

5.5 MEDIUM Published 2025-12-08 Modified 2026-10-07 Official page ↗

Status: Modified
Published: 2025-12-08
Last modified: 2026-10-07
Assigner: [email protected]
CVSS 3.1 ([email protected]): 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0): 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weaknesses: CWE-400, CWE-770

Description

In InputMethodInfo of InputMethodInfo.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected configurations

• google android 13.0 • google android 14.0 • google android 15.0 • google android 16.0

Weakness · CWE (2)

CWE-400 Uncontrolled Resource Consumption weakness
CWE-770 Allocation of Resources Without Limits or Throttling weakness

References

https://android.googlesource.com/platform/frameworks/base/+/b4c6786312a217ad9dfd97041b2f1e2f77e39b94 Patch, Product
https://source.android.com/security/bulletin/2025-12-01 Vendor Advisory

CVE-2025-48603

Description

Affected configurations

Related

Weakness · CWE (2)

References