Medium
CVSS 5.5
Overview
Out-of-bounds write in accessing uninitialized memory in libsavsvc.so prior to Android 15 allows local attackers to cause memory corruption.
CVE-2025-21007
Out-of-bounds write in accessing uninitialized memory in libsavsvc.so prior to A...
Risk analysis
This vulnerability is rated 🟡 MEDIUM.
- CVSS: 5.5 (MEDIUM)
- Detected tags: mem_corruption, oob_write, uninit_memory (tag impact: LOW)
Recommended actions:
- Prioritize remediation based on business criticality and exposure.
- Limit exposure and increase monitoring until fixed.