PT-2026-22666 · Unknown · Usageevents

Published 2026-03-01 · Updated 2026-03-06 · CVE-2025-32313

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions UsageEvents (affected versions not specified)

Description An out-of-bounds write issue exists in the UsageEvents.java component due to an incorrect bounds check. This could allow for local escalation of privilege without requiring additional execution privileges or user interaction. The vulnerable code is located in the UsageEvents class.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

ASB-A-399155883

CVE-2025-32313

Affected Products

Usageevents

References · 12

• https://nvd.nist.gov/vuln/detail/CVE-2025-32313 · Security Note
• https://osv.dev/vulnerability/ASB-A-399155883 · Vendor Advisory
• https://source.android.com/docs/security/bulletin/2026/2026-03-01 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-32313 · Vendor Advisory
• https://twitter.com/TheHackerWire/status/2028775740234453157 · Twitter Post
• https://twitter.com/cracbot/status/2029874907258179859 · Twitter Post
• https://source.android.com/security/bulletin/2026-03-01 · Note
• https://android.googlesource.com/platform/frameworks/base/+/59c15187e7ee299592c22a166528fb27b3a03867 · Note
• https://t.me/cveNotify/154457 · Telegram Post
• https://twitter.com/cracbot/status/2029512442481684751 · Twitter Post
• https://t.me/cveNotify/153840 · Telegram Post
• https://t.me/cveNotify/153921 · Telegram Post