Skip to content
OpenAdvisories
High 2 exploited CVEs WID-SEC-2025-1709 6 CVEs

Android Patchday August 2025: Multiple Vulnerabilities

Published Aug 4, 2025 · Updated Aug 4, 2025 · de-DE

Summary

Ein Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Berechtigungen zu erweitern, vertrauliche Informationen offenzulegen, beliebigen Code auszuführen oder andere nicht näher bezeichnete Angriffe durchzuführen.

Product

Das Android Betriebssystem ist eine quelloffene Plattform für mobile Geräte. Die Basis bildet der Linux-Kernel.

Vulnerabilities 6

  • High 8.6
    CVE-2025-21479 Exploited Public exploit

    Incorrect Authorization in Graphics

    Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.

    KEV Jun 3, 2025
  • High 7.5
    CVE-2025-27038 Exploited

    Use After Free in Graphics

    Memory corruption while rendering graphics using Adreno GPU drivers in Chrome.

    KEV Jun 3, 2025
  • High 8.1

    In multiple locations, there is a possible condition that results in OOB accesses due to an incorrect bounds check. Thi…

  • High 7.3
    CVE-2025-22441 Public exploit

    In getContextForResourcesEnsuringCorrectCachedApkPaths of RemoteViews.java, there is a possible way to load arbitrary j…

  • High 7.0

    In multiple locations, there is a possible way to use apps linked from a context menu of a lockscreen app due to a race…

  • Medium 4.3

    Mali GPU Userspace Driver allows access to already freed memory

    Use After Free vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operations, including via We…

Revision history

  1. #1

    Initiale Fassung

References