PT-2025-43504 · Google · Android

Published 2025-10-23 · Updated 2026-05-12 · CVE-2025-48631

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Android Framework (affected versions not specified)

Description A flaw in the Android Framework component allows a remote attacker to cause a persistent denial of service through resource exhaustion. The issue exists in the onHeaderDecoded() function of LocalImageResolver.java. Exploitation can be triggered by sending a GIF and does not require user interaction or additional execution privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Allocation of Resources Without Limits

Information Disclosure

Resource Exhaustion

Weakness Enumeration

CWE-770

CWE-200

CWE-400

Related Identifiers

ASB-A-444671303

BDU:2025-15021

CVE-2025-48631

Affected Products

Android

References · 29

• https://source.android.com/docs/security/bulletin/2026/2026-03-01 · Vendor Advisory
• https://osv.dev/vulnerability/ASB-A-444671303 · Vendor Advisory
• https://android.googlesource.com/platform/frameworks/base/+/d6df825fda3aa29cff7af05357005322152210fd · Patch
• https://bdu.fstec.ru/vul/2025-15021 · Security Note
• https://source.android.com/security/bulletin/2025-12-01 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-48631 · Security Note
• https://osv.dev/vulnerability/CVE-2025-48631 · Vendor Advisory
• https://reddit.com/r/sysadmin/comments/1pceedn/googles_december_android_patch_fixes_107_bugs · Reddit Post
• https://reddit.com/r/CVEWatch/comments/1t92tju/top_10_trending_cves_10052026 · Reddit Post
• https://t.me/cveNotify/153815 · Telegram Post
• https://twitter.com/hulkvision/status/2053176199367790722 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1tax0si/top_10_trending_cves_12052026 · Reddit Post
• https://reddit.com/r/KibernetinisSaugumas/comments/1pc7hr0/google_i%C5%A1tais%C4%97_107_android_pa%C5%BEeid%C5%BEiamumus · Reddit Post
• https://i.redd.it/yqddy68gc85g1.jpeg · Reddit Post
• https://thehackernews.com/2025/12/google-patches-107-android-flaws.html · Note