DeutschShown in its original language — a full translation is planned for a future version.
Android Patchday Dezember 2025: Mehrere Schwachstellen
view advisory published 2025-12-01
Ein Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um sich erweiterte Berechtigungen zu verschaffen, einen Denial-of-Service-Zustand auszulösen, vertrauliche Informationen offenzulegen oder andere nicht näher spezifizierte Angriffe durchzuführen.
01
describes (107)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-48617US | —OT elevated | Exploit | ||
In overrideConfig of CarrierConfigLoader.java, there is a possible way to bypass UID check due to a permissions bypass. This could lead to local escalation of privilege with no add… | ||||
| CVE-2025-47382US | —OT elevated | — | ||
Memory corruption while loading an invalid firmware in boot loader. | ||||
| CVE-2025-47372US | high8.4 | — | ||
Memory Corruption when a corrupted ELF image with an oversized file size is read into a buffer without authentication. | ||||
| CVE-2025-47323US | — | — | ||
Memory corruption while routing GPR packets between user and root when handling large data packet. | ||||
| CVE-2025-47319US | — | — | ||
Information disclosure while exposing internal TA-to-TA communication APIs to HLOS | ||||
| CVE-2025-48639US | high7.3 | — | ||
In DefaultTransitionHandler.java, there is a possible way to unknowingly grant permissions to an app due to a tapjacking/overlay attack. This could lead to local escalation of priv… | ||||
| CVE-2025-48638US | high7.8 | — | ||
In __pkvm_load_tracing of trace.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with no additional exe… | ||||
| CVE-2025-48637US | high7.8 | — | ||
In multiple functions of mem_protect.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional exec… | ||||
| CVE-2025-48633US | medium5.5OT critical | KEV | ||
In hasAccountsOnAnyUser of DevicePolicyManagerService.java, there is a possible way to add a Device Owner after provisioning due to a logic error in the code. This could lead to lo… | ||||
| CVE-2025-48632US | high7.8 | — | ||
In setDisplayName of AssociationRequest.java, there is a possible way to cause CDM associations to persist after the user has disassociated them due to improper input validation. T… | ||||
| CVE-2025-48631US | medium6.5 | — | ||
In onHeaderDecoded of LocalImageResolver.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to remote denial of service with no addi… | ||||
| CVE-2025-48629US | high7.8OT elevated | — | ||
In findAvailRecognizer of VoiceInteractionManagerService.java, there is a possible way to become the default speech recognizer app due to an insecure default value. This could lead… | ||||
| CVE-2025-48628US | high7.8 | — | ||
In validateIconUserBoundary of PrintManagerService.java, there is a possible cross-user image leak due to a confused deputy. This could lead to local escalation of privilege with n… | ||||
| CVE-2025-48627US | high7.8 | — | ||
In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible way to launch an activity from the background due to a logic error in the code. This could lead… | ||||
| CVE-2025-48626US | critical9.8 | — | ||
In multiple locations, there is a possible way to launch an application from the background due to a precondition check failure. This could lead to remote escalation of privilege w… | ||||
| CVE-2025-48624US | high7.8 | — | ||
In multiple functions of arm-smmu-v3.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with no additiona… | ||||
| CVE-2025-48623US | high7.8 | — | ||
In init_pkvm_hyp_vcpu of pkvm.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execu… | ||||
| CVE-2025-48622US | medium5.5 | — | ||
In ProcessArea of dng_misc_opcodes.cpp, there is a possible out of bounds read due to a buffer overflow. This could lead to local information disclosure with no additional executio… | ||||
| CVE-2025-48621US | high7.3OT elevated | — | ||
In DefaultTransitionHandler.java, there is a possible way to enable a tapjacking attack due to a insecure default. This could lead to local escalation of privilege with no addition… | ||||
| CVE-2025-48620US | high7.8 | — | ||
In onSomePackagesChanged of VoiceInteractionManagerService.java, there is a possible way for a third party application's component name to persist even after uninstalling due to a… | ||||
showing 20 of 107
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan