CVE-2025-26456

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In multiple functions of DexUseManagerLocal.java, there is a possible way to crash system server due to a logic error in the code. This could lead to local permanent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-703

Affected software

No affected versions have been published.

Timeline

Published: Sep 4, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-264587.8In multiple functions of LocationProviderManager.java, there is a possible background activity launch due to a logic error in the code. This CVE-2025-26469.8A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. It has been declared as critical. Affected by this vulnerability CVE-2025-264613.3In Permission Manager, there is a possible way for the microphone privacy indicator to remain activated even after the user attempts to clos CVE-2025-264627.8In AccessibilityServiceConnection.java, there is a possible background activity launch due to a logic error in the code. This could lead to CVE-2025-264635.5In allowPackageAccess of multiple files, resource exhaustion is possible when repeatedly adding allowed packages. This could lead to a local CVE-2025-264647.8In executeAppFunction of AppSearchManagerService.java, there is a possible background activity launch due to a logic error in the code. This CVE-2025-264656.8A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malic CVE-2025-264665.9A flaw was found in the OpenSSH package. For each ping packet the SSH server receives, a pong packet is allocated in a memory buffer and sto CVE-2025-264678.8Privilege Defined With Unsafe Actions vulnerability in Apache Cassandra. An user with MODIFY permission ON ALL KEYSPACES can escalate privil CVE-2025-264687.5CyberData 011209 Intercom exposes features that could allow an unauthenticated to gain access and cause a denial-of-service condition o CVE-2025-264699.8An incorrect default permissions vulnerability exists in the CServerSettings::SetRegistryValues functionality of MedDream PACS Premium 7.3.3 CVE-2025-26479.8A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. It has been rated as critical. Affected by this issue is some unk