Heap Buffer Overflow Vulnerability in C2SoftDav1dDec for Android Framework

CVE-2025-48592

What is CVE-2025-48592?

A heap buffer overflow vulnerability has been identified in the C2SoftDav1dDec component of the Android Framework, specifically in the initDecoder function. This flaw enables potential out of bounds read conditions, which may facilitate remote information disclosure without requiring additional execution privileges or user interaction. As a result, this could pose significant security risks to affected systems.

References