CVE-2025-48622

Description

In ProcessArea of dng_misc_opcodes.cpp, there is a possible out of bounds read due to a buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

PUBLISHED Reserved 2025-05-22 | Published 2025-12-08 | Updated 2025-12-08 | Assigner google_android

Problem types

Information disclosure

Product status

References

android.googlesource.com/...0fb9b47f543be0949f9004e77510f494

android.googlesource.com/...61e35af50b28b861943a0b0753b10929

android.googlesource.com/...5e555ad7b9b54549698c3e569d7a0af5

source.android.com/security/bulletin/2025-12-01

cve.org (CVE-2025-48622)

nvd.nist.gov (CVE-2025-48622)

Download JSON