CVE-2025-21008

Name of the Vulnerable Software and Affected Versions: Android versions prior to 15

Description: The issue is related to an out-of-bounds read in the decoding frame header in libsavsvc.so. This allows local attackers to cause memory corruption.

Recommendations: For Android versions prior to 15, consider restricting access to the libsavsvc.so library until a patch is available. As a temporary workaround, avoid using the decoding frame header functionality in libsavsvc.so to minimize the risk of exploitation.