WID-SEC-W-2025-1709

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Android Patchday August 2025: Multiple Vulnerabilities

view advisory published 2025-08-04

Ein Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Berechtigungen zu erweitern, vertrauliche Informationen offenzulegen, beliebigen Code auszuführen oder andere nicht näher bezeichnete Angriffe durchzuführen.

01

describes (6)

Related CVEs.

IDseverity exploitable
CVE-2025-48533US——
In multiple locations, there is a possible way to use apps linked from a context menu of a lockscreen app due to a race condition. This could lead to local escalation of privilege…
CVE-2025-48530US——
In multiple locations, there is a possible condition that results in OOB accesses due to an incorrect bounds check. This could lead to remote code execution in combination with oth…
CVE-2025-22441US—Exploit
In getContextForResourcesEnsuringCorrectCachedApkPaths of RemoteViews.java, there is a possible way to load arbitrary java code in a privileged context due to a confused deputy. Th…
CVE-2025-0932US——
Use After Free vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privi…
CVE-2025-21479US—OT criticalKEV
Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.
CVE-2025-27038US—OT criticalKEV
Memory corruption while rendering graphics using Adreno GPU drivers in Chrome.
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan