PT-2025-3746 · Google · Android

Publicado 2024-08-01 · Atualizado 2025-02-07 · CVE-2025-0096

Positive Technologies (AI Summary)

CVSS v4.0

5.9

Média

Vetor base

AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear

Name of the Vulnerable Software and Affected Versions Android (affected versions not specified)

Description The issue is related to insufficient input validation in Android operating systems. Exploitation of this issue may allow an attacker to elevate their privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2025-01134

CVE-2025-0096

Produtos afetados

Android

Referências · 5

• https://reddit.com/r/k12cybersecurity/comments/1ihj62l/msisac_cybersecurity_advisory_multiple · Publicação no Reddit
• https://cybersecurity-help.cz/vdb/SB2025020380 · Nota
• https://bdu.fstec.ru/vul/2025-01134 · Nota de Segurança
• https://source.android.com/docs/security/bulletin/2025-02-01?hl=ru · Nota
• https://twitter.com/xvonfers/status/1887810583325454774 · Publicação no Twitter