Android Widevine DRM Component Privilege Escalation Vulnerability

Vulnerability

A use-after-free vulnerability has been identified in the Widevine DRM component of Android, leading to potential memory corruption. This vulnerability allows for local escalation of privileges without requiring additional execution rights or user interaction. The issue affects multiple versions of Android.

Impact

Exploitation of this vulnerability could result in unauthorized privilege escalation, allowing a user to gain elevated rights or access within the system.

Remediation

Users can update their devices to the September 2025 security patch level to address this vulnerability. Instructions for checking and updating the Android version are available on the Google Support website.

Added: Sep 4, 2025, 7:42 PM
Updated: Sep 4, 2025, 7:42 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
7.5
exploitability
4.7
remediation
7.7
relevance
0.4
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.