Android System
cpe:2.3:o:google:android:*:*:*:*:*:*:*
A use-after-free vulnerability has been identified in the Widevine DRM component of Android, leading to potential memory corruption. This vulnerability allows for local escalation of privileges without requiring additional execution rights or user interaction. The issue affects multiple versions of Android.
Exploitation of this vulnerability could result in unauthorized privilege escalation, allowing a user to gain elevated rights or access within the system.
Users can update their devices to the September 2025 security patch level to address this vulnerability. Instructions for checking and updating the Android version are available on the Google Support website.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.