PT-2025-36019 · Unknown · Windows Cursor

Published 2025-06-01 · Updated 2025-09-04 · CVE-2025-26448

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions CursorWindow (affected versions not specified)

Description An out-of-bounds read issue exists in the writeToParcel function within CursorWindow.cpp due to uninitialized data. This could lead to local information disclosure and does not require additional execution privileges or user interaction for exploitation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-457

Related Identifiers

ASB-A-309407957

CVE-2025-26448

Affected Products

Windows Cursor

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-26448 · Security Note
• https://source.android.com/security/bulletin/2025-06-01 · Vendor Advisory
• https://android.googlesource.com/platform/frameworks/base/+/3c1515f4d1942f2453554315a576ed874703f78b · Patch
• https://osv.dev/vulnerability/CVE-2025-26448 · Vendor Advisory
• https://osv.dev/vulnerability/ASB-A-309407957 · Vendor Advisory
• https://twitter.com/CVEnew/status/1963655955943424034 · Twitter Post