2025 CVE Vulnerabilities
45,179 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-48637 | HIGH | 7.8 | 0.1% | Dec 8, 2025 | In multiple functions of mem_protect.c, there is a possible out of bounds write due to an integer overflow. This could l... |
| CVE-2025-48633 | MEDIUM | 5.5 | 0.2% | Dec 8, 2025 | In hasAccountsOnAnyUser of DevicePolicyManagerService.java, there is a possible way to add a Device Owner after provisio... |
| CVE-2025-48632 | HIGH | 7.8 | 0.1% | Dec 8, 2025 | In setDisplayName of AssociationRequest.java, there is a possible way to cause CDM associations to persist after the use... |
| CVE-2025-48631 | MEDIUM | 6.5 | 0.5% | Dec 8, 2025 | In onHeaderDecoded of LocalImageResolver.java, there is a possible persistent denial of service due to resource exhausti... |
| CVE-2025-48629 | HIGH | 7.8 | 0.1% | Dec 8, 2025 | In findAvailRecognizer of VoiceInteractionManagerService.java, there is a possible way to become the default speech reco... |
| CVE-2025-48628 | HIGH | 7.8 | 0.1% | Dec 8, 2025 | In validateIconUserBoundary of PrintManagerService.java, there is a possible cross-user image leak due to a confused dep... |
| CVE-2025-48627 | HIGH | 7.8 | 0.1% | Dec 8, 2025 | In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible way to launch an activity from the ... |
| CVE-2025-48626 | CRITICAL | 9.8 | 0.3% | Dec 8, 2025 | In multiple locations, there is a possible way to launch an application from the background due to a precondition check ... |
| CVE-2025-48624 | HIGH | 7.8 | 0.1% | Dec 8, 2025 | In multiple functions of arm-smmu-v3.c, there is a possible out-of-bounds write due to improper input validation. This c... |
| CVE-2025-48623 | HIGH | 7.8 | 0.1% | Dec 8, 2025 | In init_pkvm_hyp_vcpu of pkvm.c, there is a possible out of bounds write due to improper input validation. This could le... |
| CVE-2025-48622 | MEDIUM | 5.5 | 0.1% | Dec 8, 2025 | In ProcessArea of dng_misc_opcodes.cpp, there is a possible out of bounds read due to a buffer overflow. This could lead... |
| CVE-2025-48621 | HIGH | 7.3 | 0.1% | Dec 8, 2025 | In DefaultTransitionHandler.java, there is a possible way to enable a tapjacking attack due to a insecure default. This ... |
| CVE-2025-48620 | HIGH | 7.8 | 0.1% | Dec 8, 2025 | In onSomePackagesChanged of VoiceInteractionManagerService.java, there is a possible way for a third party application's... |
| CVE-2025-48618 | MEDIUM | 6.8 | 0.1% | Dec 8, 2025 | In processLaunchBrowser of CommandParamsFactory.java, there is a possible browser interaction from the lockscreen due to... |
| CVE-2025-48615 | HIGH | 7.8 | 0.1% | Dec 8, 2025 | In getComponentName of MediaButtonReceiverHolder.java, there is a possible desync in persistence due to resource exhaust... |
| CVE-2025-48614 | MEDIUM | 4.6 | 0.1% | Dec 8, 2025 | In rebootWipeUserData of RecoverySystem.java, there is a possible way to factory reset the device while in DSU mode due ... |
| CVE-2025-48612 | HIGH | 7.8 | 0.1% | Dec 8, 2025 | In setDefaultKey of DefaultPaymentSettings.java, there is a possible way for an application to set the main user's defau... |
| CVE-2025-48610 | MEDIUM | 5.5 | 0.1% | Dec 8, 2025 | In __pkvm_guest_relinquish_to_host of mem_protect.c, there is a possible configuration data leak due to a logic error in... |
| CVE-2025-48607 | MEDIUM | 5.5 | 0.1% | Dec 8, 2025 | In multiple locations, there is a possible way to create a large amount of app ops due to a logic error in the code. Thi... |
| CVE-2025-48604 | MEDIUM | 5.5 | 0.1% | Dec 8, 2025 | In multiple locations, there is a possible way to read files from another user due to a missing permission check. This c... |
| CVE-2025-48603 | MEDIUM | 5.5 | 0.1% | Dec 8, 2025 | In InputMethodInfo of InputMethodInfo.java, there is a possible permanent denial of service due to resource exhaustion. ... |
| CVE-2025-48601 | MEDIUM | 5.5 | 0.1% | Dec 8, 2025 | In multiple locations, there is a possible permanent denial of service due to improper input validation. This could lead... |
| CVE-2025-48600 | MEDIUM | 5.5 | 0.1% | Dec 8, 2025 | In multiple files, there is a possible way to reveal information across users due to a missing permission check. This co... |
| CVE-2025-48599 | HIGH | 7.8 | 0.1% | Dec 8, 2025 | In multiple functions of WifiScanModeActivity.java, there is a possible way to bypass a device config restriction due to... |
| CVE-2025-48598 | MEDIUM | 6.6 | 0.1% | Dec 8, 2025 | In multiple locations, there is a possible way to alter the primary user's face unlock settings due to a confused deputy... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now