PT-2025-43504 · Google · Android

Published

2025-10-23

·

Updated

2026-05-12

·

CVE-2025-48631

CVSS v2.0

10

High

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Android Framework (affected versions not specified)
Description A flaw in the Android Framework component allows a remote attacker to cause a persistent denial of service through resource exhaustion. The issue exists in the onHeaderDecoded() function of LocalImageResolver.java. Exploitation can be triggered by sending a GIF and does not require user interaction or additional execution privileges.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Resource Exhaustion

Allocation of Resources Without Limits

Information Disclosure

Weakness Enumeration

Related Identifiers

ASB-A-444671303
BDU:2025-15021
CVE-2025-48631

Affected Products

Android