CVE-2025-48624CWE-20CWE-787

CVE-2025-48624

High · published December 8, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
0.7
In the wild
Unconfirmed
What it is

⚡ Improper input validation in arm-smmu-v3.c can lead to a sneaky out-of-bounds write, opening doors for local privilege escalation without breaking a sweat! 🔥 Think of it as a restaurant where a chef allows anyone to add ingredients to recipes without checks—a disgruntled customer could slip in something dangerous while no one’s watching! If exploited, an attacker could leverage this vulnerability to escalate their privileges on the system, potentially gaining access to sensitive data or critical system functions. This could lead to anything from data corruption to unauthorized control over system processes—all without needing additional execution permissions!

Put simply

Think of it as a restaurant where a chef allows anyone to add ingredients to recipes without checks—a disgruntled customer could slip in something dangerous while no one’s watching! This vulnerability stems from multiple functions in arm-smmu-v3.c that fail to properly validate user inputs, causing out-of-bounds writes that can manipulate memory and execute unauthorized operations.

What to do

If exploited, an attacker could leverage this vulnerability to escalate their privileges on the system, potentially gaining access to sensitive data or critical system functions. This could lead to anything from data corruption to unauthorized control over system processes—all without needing additional execution permissions! To secure your system, patch the affected component immediately. Review and enhance input validation measures across your applications to prevent similar issues in the future. Regular audits can help spot potential weaknesses early! You've got this! Follow these steps to lock down your systems and boost your security hero status! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00097 · 0.7th percentile
Weaknesses
CWE-20 · Improper Input Validation; CWE-787 · Out-of-bounds Write
Published
2025-12-08T22:16Z
Affected products (1)
ProductVersionsFixed in
google/androidall versions—
References (2)
EPSS history
Timeline
  • 08 DEC 16:57Z
    In multiple functions of arm-smmu-v3.c, there is a possible out-of-bounds write due to improper input validation
    cvelistv5