DeutschShown in its original language — a full translation is planned for a future version.
Android Patchday September 2025: Multiple Vulnerabilities
view advisory published 2025-09-02
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu verursachen oder andere nicht näher spezifizierte Angriffe durchzuführen.
01
describes (111)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-47329US | — | — | ||
Memory corruption while handling invalid inputs in application info setup. | ||||
| CVE-2025-47328US | — | — | ||
Transient DOS while processing power control requests with invalid antenna or stream values. | ||||
| CVE-2025-47326US | — | — | ||
Transient DOS while handling command data during power control processing. | ||||
| CVE-2025-47318US | — | — | ||
Transient DOS while parsing the EPTM test control message to get the test pattern. | ||||
| CVE-2025-47317US | — | — | ||
Memory corruption due to global buffer overflow when a test command uses an invalid payload type. | ||||
| CVE-2025-27034US | — | — | ||
Memory corruption while selecting the PLMN from SOR failed list. | ||||
| CVE-2025-27032US | — | — | ||
memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency. | ||||
| CVE-2025-21488US | — | — | ||
Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set. | ||||
| CVE-2025-21487US | — | — | ||
Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length. | ||||
| CVE-2025-21484US | — | — | ||
Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet. | ||||
| CVE-2025-21483US | — | — | ||
Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs. | ||||
| CVE-2025-21482US | — | — | ||
Cryptographic issue while performing RSA PKCS padding decoding. | ||||
| CVE-2025-21481US | — | — | ||
Memory corruption while performing private key encryption in trusted application. | ||||
| CVE-2025-3212US | — | — | ||
Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileg… | ||||
| CVE-2025-48581US | — | — | ||
In VerifyNoOverlapInSessions of apexd.cpp, there is a possible way to block security updates due to a logic error in the code. This could lead to local escalation of privilege with… | ||||
| CVE-2025-48563US | — | — | ||
In onNullBinding of RemoteFillService.java, there is a possible background activity launch due to an insecure default value. This could lead to local escalation of privilege with n… | ||||
| CVE-2025-48562US | medium5.0 | — | ||
In writeContent of RemotePrintDocument.java, there is a possible information disclosure due to a logic error. This could lead to local information disclosure with no additional exe… | ||||
| CVE-2025-48561US | medium5.5 | Exploit | ||
In multiple locations, there is a possible way to access data displayed on the screen due to side channel information disclosure. This could lead to local information disclosure wi… | ||||
| CVE-2025-48560US | — | — | ||
In AndroidManifest.xml, there is a possible way for an app to monitor motion events due to a confused deputy. This could lead to local information disclosure with no additional exe… | ||||
| CVE-2025-48559US | — | — | ||
In multiple functions of AppOpsService.java, there is a possible add a large amount of app ops due to improper input validation. This could lead to local denial of service with no… | ||||
showing 20 of 111
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan