CVEvulnerability

CVE-2025-48637

7.8 HIGH Published 2025-12-08 Modified 2026-10-07 Official page ↗

Status: Modified
Published: 2025-12-08
Last modified: 2026-10-07
Assigner: [email protected]
CVSS 3.1 ([email protected]): 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0): 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-190

Description

In multiple functions of mem_protect.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected configurations

• google android

Weakness · CWE (1)

CWE-190 Integer Overflow or Wraparound weakness

References

https://android.googlesource.com/kernel/common/+/4cfc9c2d8815577832cafbfcd7f98025f0da718d Product
https://android.googlesource.com/kernel/common/+/aff2255dbe38dc7c57bac8d3ba9feed989289b20 Product
https://source.android.com/security/bulletin/2025-12-01 Vendor Advisory

CVE-2025-48637

Description

Affected configurations

Related

Weakness · CWE (1)

References