PT-2025-28385 · Google · Android

·

CVE-2025-21006

·

Published

2024-10-10

·

Updated

2025-07-15

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: Android versions prior to 15
Description: The issue concerns an out-of-bounds write in the handling of macro blocks for the MPEG4 codec in the libsavsvc.so library. This allows local attackers to write out-of-bounds memory.
Recommendations: For versions prior to Android 15, update to Android 15 or later to resolve the issue.

Fix

Memory Corruption

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2025-08860
CVE-2025-21006

Affected Products

Android