CVE-2025-48603: Medium severity Google Android vulnerability
Published Dec 1, 2025
·Updated
In InputMethodInfo of InputMethodInfo.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
5 affected components
Google Android
Google Android=13.0
Google Android=14.0
Google Android=15.0
Google Android=16.0
Remediation
Event History
Dec 1, 2025
CVE Published
via Android·12:00 AM
Data Sourced
via Android·12:00 AM
Affected Software
Dec 8, 2025
CVE Published
via MITRE·04:57 PM
Data Sourced
via MITRE·04:57 PM
DescriptionWeakness
Data Sourced
via NVD·05:16 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-48603?
CVE-2025-48603 has a severity rating that indicates a possible local denial of service due to resource exhaustion.
2
How do I fix CVE-2025-48603?
To fix CVE-2025-48603, update your Android device to the latest version that addresses this vulnerability.
3
Which Android versions are affected by CVE-2025-48603?
CVE-2025-48603 affects Android versions 13.0, 14.0, 15.0, and 16.0.
4
Can CVE-2025-48603 be exploited without user interaction?
Yes, CVE-2025-48603 can be exploited without any user interaction required.
5
What impact does CVE-2025-48603 have on Android devices?
CVE-2025-48603 can lead to a permanent denial of service on affected Android devices.