CVE-2025-48592 Memory corruption in Android

Medium 6.5 Published 8 Dec 2025 Updated 17 Dec 2025

A heap buffer overflow in the Android decoder allows remote attackers to read sensitive memory without user interaction or privileges.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2025-48592?

CVE-2025-48592 is a medium-severity memory corruption vulnerability in Google Android, published on 8 Dec 2025. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

In initDecoder of C2SoftDav1dDec.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Weakness: CWE-125, CWE-122

Which versions are affected by CVE-2025-48592?

It affects 1 product.

Products include Google Android.

How do I fix CVE-2025-48592?

Apply the vendor's patch.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2025-48592 being exploited?

There is no known exploitation of CVE-2025-48592 in the wild and no public exploit code.

All Google Android vulnerabilities

Sources

Also known as A-427113482, ASB-A-427113482, GHSA-2754-h3wv-g4xx.