CVE-2025-48603

MEDIUM · 5.5 CVSS Gepubliceerd: 08-12-2025 CWE-770

Beschrijving

In InputMethodInfo of InputMethodInfo.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Vendors

Google

Affected products

Android

References

android.googlesource.com
source.android.com