Android Security Bulletin: isemtelephony Access Control & libsavsvc.so OOB Write/Read Vulnerabilities (CVE-2025-21005-21009)

From this webpage screenshot, the following key vulnerability information can be obtained: July 2025 Update Other Software Updates 1. SVE-2024-0857 (CVE-2025-21005): Improper Access Control in isemtelephony - Severity: Medium - Fixed in: Android 15 - Reported Date: April 8, 2024 - Description: Improper access control in isemtelephony prior to Android 15 allowed a local attacker to access sensitive information. The patch adds appropriate access controls. - Acknowledgment: KnifeFish 2. SVE-2024-1963 (CVE-2025-21006): Out-of-bounds Write in libsavsvc.so - Severity: High - Fixed in: Android 15 - Reported Date: October 10, 2024 - Description: An out-of-bounds write occurred in libsavsvc.so when processing macroblocks for the MPEG4 codec prior to Android 15, allowing a local attacker to write beyond memory bounds. The patch adds proper input validation. 3. SVE-2024-1964 (CVE-2025-21007): Out-of-bounds Write in libsavsvc.so - Severity: Medium - Fixed in: Android 15 - Reported Date: October 10, 2024 - Description: An out-of-bounds write occurred in libsavsvc.so when accessing uninitialized memory prior to Android 15, allowing a local attacker to cause memory corruption. The patch adds appropriate boundary checks. 4. SVE-2024-1965 (CVE-2025-21008): Out-of-bounds Read in libsavsvc.so - Severity: Medium - Fixed in: Android 15 - Reported Date: October 10, 2024 - Description: An out-of-bounds read occurred in libsavsvc.so during frame header decoding prior to Android 15, allowing a local attacker to cause memory corruption. The patch adds appropriate boundary checks. 5. SVE-2024-1966 (CVE-2025-21009): Out-of-bounds Read in libsavsvc.so - Severity: Medium - Fixed in: Android 15 - Reported Date: October 10, 2024 - Description: An out-of-bounds read occurred in libsavsvc.so when decoding malformed frame headers prior to Android 15, allowing a local attacker to cause memory corruption. The patch adds appropriate boundary checks. This information covers the vulnerability IDs, severity levels, fixed versions, reporting dates, descriptions, and corresponding patch measures.

Goal Reached Thanks to every supporter — we hit 100%!

Android Security Bulletin: isemtelephony Access Control & libsavsvc.so OOB Write/Read Vulnerabilities (CVE-2025-21005-21009)