CVE-2025-48569

MediumCVSS 5.5/10Last modified Oct 7, 2026

Description

In multiple locations, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-770 CWE-400

Affected software

No affected versions have been published.

Timeline

Published: Dec 8, 2025
Last modified: Oct 7, 2026
NVD status: Modified

Related CVEs from 2025

CVE-2025-48577.2The Newsletters plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.9.9.9 via the 'file' para CVE-2025-485707.8In multiple functions of PipTaskOrganizer.java, there is a possible way to launch an activity from the background due to a confused deputy. CVE-2025-485714.3In multiple functions of btm_sec.cc, there is a possible way for an attacker to intercept SMS messages due to a logic error in the code. Thi CVE-2025-485727.8In multiple locations, there is a possible way to launch activities from the background due to a permissions bypass. This could lead to loca CVE-2025-485737.8In sendCommand of MediaSessionRecord.java, there is a possible way to launch the foreground service while the app is in the background due t CVE-2025-485748.4In validateAddingWindowLw of DisplayPolicy.java, there is a possible way for an app to intercept drag-and-drop events due to a missing permi CVE-2025-485757.8In multiple functions of CertInstaller.java, there is a possible way to install certificates due to a permissions bypass. This could lead to CVE-2025-485765.5In updateNotificationChannelGroupFromPrivilegedListener of NotificationManagerService.java, there is a possible permanent denial of service CVE-2025-485777.4In multiple functions of KeyguardViewMediator.java, there is a possible lockscreen bypass due to a race condition. This could lead to local CVE-2025-485787.8In multiple functions of MediaProvider.java, there is a possible way to bypass the WRITE_EXTERNAL_STORAGE permission due to a missing permis CVE-2025-485798.4In multiple functions of MediaProvider.java, there is a possible external storage write permission bypass due to a confused deputy. This cou CVE-2025-48584.8A vulnerability was found in D-Link DAP-2695 120b36r137_ALL_en_20210528. It has been declared as problematic. This vulnerability affects unk