7.5
/ 10
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
In dng_lossless_decoder::HuffDecode of dng_lossless_jpeg.cpp, there is a possible way to cause a crash due to uninitialized data. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
Basic Information
ID
CVE-2025-0081
Source
google_android
Published
Aug 26, 2025 at 22:48
Modified
Aug 27, 2025 at 13:43
Affected Product
Vendor
Google
Product
Android
Version
15
Affected Versions
Google Android 15
Google Android 14
Google Android 13
Google Android 12L
Google Android 12
Google Android 14
Google Android 13
Google Android 12L
Google Android 12