by Kastro
Paper/Archive/CVE-2025-26416

CVE-2025-26416

Google Android — In initializeSwizzler of SkBmpStandardCodec.cpp, there is a possible out of bounds write due to a heap buffer overflow.

EPSS 0.5%CVSS 9.8
critical.is priorityof 100
38
CVSS 9.8 (ADP)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 45.2.452 × 209.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

In initializeSwizzler of SkBmpStandardCodec.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected

ProductAffectedFixed inSource
Android15–CNA
Android14–CNA
Android13–CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refandroid.googlesource.com/platform/external/skia/+/fc2ebb312c5898486776df981a51c2bb90e3756drefsource.android.com/security/bulletin/2025-04-01