> CVE-2025-48622

« BACK_TO_HOME
PUBLISHED
2025-12-08 17:16
MODIFIED
2025-12-08 17:16
EPSS (Prob. Exploit)
0.11%
Top 98.9%
DATA SOURCES:
NVD 🔗 2025-12-08 CVE PROJECT 🔗 2026-01-19 FIRST EPSS 🔗 2026-11-08

> DESCRIPTION

In ProcessArea of dng_misc_opcodes.cpp, there is a possible out of bounds read due to a buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> HISTORIQUE DES MODIFICATIONS

Première apparition
08/12/2025 17:16
Source: NVD
📊 ENRICHISSEMENT 19/01/2026 17:37
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 1 Dernière mise à jour: 9 months ago

> REFERENCES

https://android.googlesource.com/platform/cts/+/1bcf948f5e555ad7b9b54549698c3e56...
https://android.googlesource.com/platform/external/dng_sdk/+/de700ad461e35af50b2...
https://android.googlesource.com/platform/external/skia/+/40c3f0a50fb9b47f543be0...
https://source.android.com/security/bulletin/2025-12-01
« BACK_TO_HOME