PT-2025-43504 · Google · Android

Published

2025-10-23

·

Updated

2026-02-18

·

CVE-2025-48631

CVSS v2.0
10
VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Android (affected versions not specified)
Description A flaw exists in the Framework component of Android operating systems related to insufficient protection of service data. Successful exploitation may allow a remote attacker to cause a denial of service. In LocalImageResolver.java, specifically within the
onHeaderDecoded
function, a potential persistent denial of service can occur due to resource exhaustion, potentially leading to remote denial of service without requiring additional execution privileges or user interaction.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Resource Exhaustion

Information Disclosure

Allocation of Resources Without Limits

Weakness Enumeration

Related Identifiers

BDU:2025-15021
CVE-2025-48631

Affected Products

Android