Denial of Service Vulnerability in Android's InputMethodInfo Component

CVE-2025-48603

What is CVE-2025-48603?

An issue exists in the InputMethodInfo class within InputMethodInfo.java that may allow an attacker to cause permanent denial of service through resource exhaustion. This vulnerability can result in a local denial of service, meaning that exploitation does not require elevated execution privileges or any user interaction. Affected systems may exhibit instability as resources become overutilized, leading to potential disruptions.

References