CVE-2025-48623

HighCVSS 7.8/10Last modified Oct 7, 2026

Description

In init_pkvm_hyp_vcpu of pkvm.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787CWE-20

Affected software

No affected versions have been published.

Timeline

Published
Dec 8, 2025
Last modified
Oct 7, 2026
NVD status
Modified

Related CVEs from 2025

CVE-2025-486247.8In multiple functions of arm-smmu-v3.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local eCVE-2025-486257.0In multiple locations of UsbDataAdvancedProtectionHook.java, there is a possible way to access USB data when the screen is off due to a raceCVE-2025-486269.8In multiple locations, there is a possible way to launch an application from the background due to a precondition check failure. This could CVE-2025-486277.8In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible way to launch an activity from the background due to a CVE-2025-486287.8In validateIconUserBoundary of PrintManagerService.java, there is a possible cross-user image leak due to a confused deputy. This could leadCVE-2025-486297.8In findAvailRecognizer of VoiceInteractionManagerService.java, there is a possible way to become the default speech recognizer app due to anCVE-2025-48638.6A vulnerability, which was classified as critical, was found in Advaya Softech GEMS ERP Portal 2.1. This affects an unknown part of the fileCVE-2025-486307.4In drawLayersInternal of SkiaRenderEngine.cpp, there is a possible way to access the GPU cache due to side channel information disclosure. TCVE-2025-486316.5In onHeaderDecoded of LocalImageResolver.java, there is a possible persistent denial of service due to resource exhaustion. This could lead CVE-2025-486327.8In setDisplayName of AssociationRequest.java, there is a possible way to cause CDM associations to persist after the user has disassociated CVE-2025-486335.5In hasAccountsOnAnyUser of DevicePolicyManagerService.java, there is a possible way to add a Device Owner after provisioning due to a logic CVE-2025-486347.3In relayoutWindow of WindowManagerService.java, there is a possible tapjack attack due to a missing permission check. This could lead to loc
CVE-2025-48623: High severity, CVSS 7.8 | Vulnix