CVE-2025-20794: Android Package Vulnerability Leading to Denial of Service
Summary
CVE-2025-20794: ... Affects :unknown: versions >= SoCVersion:0, < SoCVersion:2026-03-05. Fixed in SoCVersion:2026-03-05. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The affected package is part of the Android ecosystem, which is widely used for mobile devices. Android provides a rich application framework that allows developers to build innovative apps and games for mobile users. However, vulnerabilities in its components can lead to significant security risks, including denial of service attacks that can disrupt the functionality of devices.
Vulnerability Detail
This vulnerability, identified as CVE-2025-20794, originates from a flaw in the Android operating system that can be exploited to cause a denial of service (DoS). Attackers can leverage this vulnerability to crash the affected system or make it unresponsive, leading to potential data loss and disruption of services. The severity of this vulnerability is classified as high, indicating a significant risk to users and applications relying on the affected version.
How To Fix
Minimum fixed version
SoCVersion:2026-03-05
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds provided for this vulnerability. It is recommended to apply the patch as soon as it becomes available to mitigate the risk.
Conclusion
In summary, CVE-2025-20794 represents a significant vulnerability in the Android ecosystem that can lead to denial of service attacks. Users are strongly advised to update their systems to the patched version to mitigate risks associated with this vulnerability.
See every vulnerability recorded for :unknown: →
FAQ
CVE-2025-20794 is a vulnerability in the Android operating system that can lead to a denial of service attack.
You can check if your application is affected by using the Vulert playground at Vulert Scanner without any signup.
If your device is affected, update to the patched version of the Android operating system as soon as it is available.
Not addressing this vulnerability can lead to system crashes, unresponsiveness, and potential data loss.
Yes, Vulert can monitor and alert you in real-time for open-source vulnerabilities using just the gradle.lockfile.
References
Related vulnerabilities
Recent vulnerabilities recorded for :unknown:.
