CVE-2025-48644: Input Validation

Published Mar 2, 2026

Updated

In multiple locations, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Software

6 affected components

Google Android=14.0

Google Android=15.0

Google Android=16.0

Google Android=16.0-qpr2_beta_1

Google Android=16.0-qpr2_beta_2

Google Android=16.0-qpr2_beta_3

Event History

Mar 2, 2026

CVE Published

via MITRE·06:42 PM

Data Sourced

via MITRE·06:42 PM

DescriptionWeakness

Data Sourced

via NVD·07:16 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-48644?

CVE-2025-48644 is classified as a potential denial of service vulnerability due to improper input validation.

How do I fix CVE-2025-48644?

To fix CVE-2025-48644, ensure you update your affected Android device to the latest security patch provided by Google.

Which versions of Android are affected by CVE-2025-48644?

CVE-2025-48644 affects Android versions 14.0, 15.0, and 16.0, including its beta releases.

Is user interaction required for exploiting CVE-2025-48644?

No, user interaction is not needed for the exploitation of CVE-2025-48644.

What type of impact does CVE-2025-48644 have on the system?

The impact of CVE-2025-48644 is local denial of service, potentially disrupting the operation of the affected device.