In UsageEvents of UsageEvents.java, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Metrics
Affected Vendors & Products
References
| Link | Providers |
|---|---|
| https://source.android.com/security/bulletin/2026-03-01 |
|
History
Tue, 03 Mar 2026 13:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Google
Google android |
|
| CPEs | cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:* cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:* cpe:2.3:o:google:android:16.0:-:*:*:*:*:*:* |
|
| Vendors & Products |
Google
Google android |
Mon, 02 Mar 2026 21:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-787 | |
| Metrics |
cvssV3_1
|
Mon, 02 Mar 2026 19:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | In UsageEvents of UsageEvents.java, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | |
| References |
|
Status: PUBLISHED
Assigner: google_android
Published: 2026-03-02T18:41:57.788Z
Updated: 2026-03-03T04:56:25.379Z
Reserved: 2025-04-04T23:30:03.210Z
Link: CVE-2025-32313
Updated: 2026-03-02T20:24:14.923Z
Status : Analyzed
Published: 2026-03-02T19:16:24.923
Modified: 2026-03-03T13:29:52.083
Link: CVE-2025-32313
No data.