CVE-2025-32313
Undergoing Analysis Undergoing Analysis - In Progress
Out-of-Bounds Write in UsageEvents.java Enables Local Privilege Escalation

Publication date: 2026-03-02

Last updated on: 2026-03-06

Assigner: Android (associated with Google Inc. or Open Handset Alliance)

Description
In UsageEvents of UsageEvents.java, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-03-02
Last Modified
2026-03-06
Generated
2026-06-16
AI Q&A
2026-03-02
EPSS Evaluated
2026-06-15
NVD
CVE-2025-32313
EUVD
EUVD-2025-208197
Affected Vendors & Products
Showing 3 associated CPEs
Vendor Product Version / Range
google android 14.0
google android 15.0
google android 16.0
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-787 The product writes data past the end, or before the beginning, of the intended buffer.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Detection Guidance

I don't know

Mitigation Strategies

I don't know

Executive Summary

This vulnerability exists in the UsageEvents component of UsageEvents.java, where an incorrect bounds check can cause an out of bounds write.

This means that the program may write data outside the intended memory area, which can lead to unexpected behavior.

Exploitation of this flaw can result in a local escalation of privilege without requiring any additional execution privileges or user interaction.

Impact Analysis

The vulnerability can allow an attacker with local access to escalate their privileges on the affected system.

This means the attacker could gain higher-level permissions than originally granted, potentially leading to unauthorized access or control over system resources.

No additional execution privileges or user interaction are needed to exploit this vulnerability, increasing its risk.

Compliance Impact

I don't know

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-32313. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart