CVE-2025-26423: Medium severity Google Android vulnerability
In validateIpConfiguration of WifiConfigurationUtil.java, there is a possible way to trigger a permanent DoS due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-26423?
CVE-2025-26423 is classified as a high severity vulnerability due to its potential for local escalation of privilege.
How do I fix CVE-2025-26423?
To fix CVE-2025-26423, ensure that your Android device is updated to the latest security patch that addresses this vulnerability.
What software is affected by CVE-2025-26423?
CVE-2025-26423 specifically affects Google Android systems that utilize the affected WifiConfigurationUtil.java component.
What are the possible consequences of exploiting CVE-2025-26423?
Exploiting CVE-2025-26423 could lead to a permanent denial of service and allow an attacker to escalate their privileges on the device.
Does exploiting CVE-2025-26423 require user interaction?
No, exploiting CVE-2025-26423 does not require any user interaction, making it particularly dangerous.