CVE-2025-48638

Katalog CVE

CVSS 7.8 · High EPSS 0,11%

Kerentanan Out-of-bounds Write pada google android. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

In __pkvm_load_tracing of trace.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Rincian

Terbit di NVD

8 Desember 2025

Terakhir diubah

7 Oktober 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write
CWE-20: Improper Input Validation

EPSS (30 hari)

0,11% peluang dieksploitasi; lebih tinggi dari 1,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://source.android.com/security/bulletin/2025-12-01 advisory vendor
• https://android.googlesource.com/kernel/common/+/0429b7af308cf65c84109c08d06b01950dcd57fe product
• https://android.googlesource.com/kernel/common/+/96ebe96170d67df5072afa2ce84622f5a0ff552a product