CVE-2025-48631

MEDIUM WAF: Medium
CVSS 6.5 Published: 2025-12-08
CWE-400

In onHeaderDecoded of LocalImageResolver.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

WAF Coverage Analysis

Uncontrolled Resource Consumption Medium WAF Coverage

OWASP: A05:2021 Security Misconfiguration

912xxx - DOS Protection

Affected Software

VendorProductVersion
googleandroid13.0
googleandroid14.0
googleandroid15.0
googleandroid16.0
googleandroid16.0
googleandroid16.0
googleandroid16.0

References

Back to CVE Database