CVE-2025-48624 — Out-of-bounds Write in Google Android

CWE-787 — Out-of-bounds WriteCWE-20 — Improper Input Validation6 documents6 sources
Severity
7.8HIGHNVD
EPSS
0.0%
top 97.30%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Google Android
Timeline
PublishedDec 8

Description

In multiple functions of arm-smmu-v3.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages1 packages

▶CVEListV5google/androidAndroid kernel

🔴Vulnerability Details

3
GHSA
GHSA-9fp2-rfrx-c73p: In multiple functions of arm-smmu-v3↗2025-12-08
▶
CVEList
CVE-2025-48624: In multiple functions of arm-smmu-v3↗2025-12-08
▶
OSV
CVE-2025-48624: In multiple functions of arm-smmu-v3↗2025-12-01
▶

📋Vendor Advisories

2
Android
CVE-2025-48624: IOMMU↗2025-12-01
▶
Microsoft
close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE.↗2024-02-13
▶
CVE-2025-48624 — Out-of-bounds Write in Google Android | cvebase