NetSight
high7.5

CVE-2025-0081

In dng_lossless_decoder::HuffDecode of dng_lossless_jpeg.cpp, there is a possible way to cause a crash due to uninitialized data.

Impact

In dng_lossless_decoder::HuffDecode of dng_lossless_jpeg.cpp, there is a possible way to cause a crash due to uninitialized data. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffected versions
GoogleAndroid
Versions 12.0, 12.1, 13.0, 14.0, 15.0

Weakness classification

References