CVE Vulnerabilities

CVE-2025-48642

Published: Mar 02, 2026 | Modified: Mar 06, 2026
CVSS 3.x
5.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

In jump_to_payload of payload.rs, there is a possible information disclosure due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Software

NameVendorStart VersionEnd Version
AndroidGoogle14.0 (including)14.0 (including)
AndroidGoogle15.0 (including)15.0 (including)
AndroidGoogle16.0 (including)16.0 (including)
AndroidGoogle16.0-qpr2_beta_1 (including)16.0-qpr2_beta_1 (including)
AndroidGoogle16.0-qpr2_beta_2 (including)16.0-qpr2_beta_2 (including)
AndroidGoogle16.0-qpr2_beta_3 (including)16.0-qpr2_beta_3 (including)

References