Buffer Overflow Vulnerability in DNG SDK by Android
CVE-2025-48622

5.5MEDIUM

Key Information:

Vendor

Google

Status
Vendor
CVE Published:
8 December 2025

What is CVE-2025-48622?

A vulnerability exists in the DNG SDK within the ProcessArea module, specifically in the dng_misc_opcodes.cpp file. This flaw allows for a potential out-of-bounds read due to a buffer overflow, which could result in the disclosure of sensitive information on the local system. Notably, this vulnerability does not require any additional execution privileges or user interaction for exploitation, making it especially concerning for users relying on the affected SDK. Remediation measures are necessary to prevent unauthorized data access.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Affected Version(s)

Android 16

Android 15

Android 14

References

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.