CVE Vulnerabilities

CVE-2025-26448

Use of Uninitialized Variable

Published: Sep 04, 2025 | Modified: Sep 05, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

In writeToParcel of CursorWindow.cpp, there is a possible out of bounds read due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Weakness

The code uses a variable that has not been initialized, leading to unpredictable or unintended results.

Potential Mitigations

References