Back Nvd.Nist

CVE-2025-32313 Detail

Nvd.Nist • March 3, 2026

In UsageEvents of UsageEvents.java, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Denotes Vulnerable Software Are we missing a CPE here? Please let us know .

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Two CVEs Identified for Local Privilege Escalation Vulnerabilities Two vulnerabilities have been reported that allow local escalation of privilege without user interaction. CVE-2025-48636, related to a path traversal error in BugreportContentProvider.java, and CVE-2025-32313, due to an out of bounds write in UsageEvents.java, both require no additional execution privileges for exploitation. Affected software details are being sought. 2 sources 30

Extracted Entities

CVE-2025-32313 Detail

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

MITRE ATT&CK (1)