CVE-2025-26448
BaseFortify
Publication date: 2025-09-04
Last updated on: 2025-09-08
Assigner: Android (associated with Google Inc. or Open Handset Alliance)
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| android | 13.0 | |
| android | 14.0 | |
| android | 15.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-457 | The code uses a variable that has not been initialized, leading to unpredictable or unintended results. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability occurs in the Android platform's CursorWindow component due to uninitialized memory in the CursorWindow buffer (mData buffer). Specifically, in the writeToParcel function of CursorWindow.cpp, uninitialized data can be read out of bounds. This happens because the buffer is not fully initialized before being sent, potentially exposing leftover data in memory. The issue was fixed by zero-initializing the buffer to prevent data leakage. [1]
How can this vulnerability impact me? :
This vulnerability can lead to local information disclosure without requiring any additional execution privileges or user interaction. An attacker could potentially read sensitive data from uninitialized memory within the CursorWindow buffer, which might expose private information stored in memory. [1]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability involves an out of bounds read due to uninitialized data in the Android CursorWindow component and does not require user interaction or network activity for exploitation. Detection would typically involve verifying the presence of the vulnerable code or patch level on the device rather than network-based detection. There are no specific commands provided to detect exploitation or presence of this vulnerability on a system or network.
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, update the Android platform to include the patch that zero-initializes the CursorWindow buffer, as committed on March 14, 2025. Applying the official security update or patch from the device or platform vendor that includes this fix will prevent potential data leakage from uninitialized memory. There are no additional mitigation steps or workarounds mentioned. [1]