CVE-2025-61617: Android Unknown Package Denial of Service Vulnerability
Summary
CVE-2025-61617: ... Affects :unknown: versions >= SoCVersion:0, < SoCVersion:2025-12-05. Fixed in SoCVersion:2025-12-05. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The affected package is an unknown component within the Android ecosystem, which is widely used in mobile applications for various functionalities. This package is integral to the operation of many Android applications, providing essential services and features. However, it has been identified to have a vulnerability that could lead to a Denial of Service (DoS) attack, impacting the availability of applications that rely on it.
Vulnerability Detail
The vulnerability, identified as CVE-2025-61617, originates from a flaw in the unknown package that allows an attacker to exploit it, leading to a Denial of Service (DoS). This means that the affected applications could become unresponsive or crash, severely affecting user experience and application reliability. The severity of this vulnerability is classified as high, indicating that it poses a significant risk to users and developers alike.
How To Fix
Minimum fixed version
SoCVersion:2025-12-05
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, developers can implement additional error handling and monitoring within their applications to detect and respond to potential DoS attacks. This may include rate limiting requests or implementing circuit breakers to prevent the application from becoming unresponsive.
Conclusion
In summary, CVE-2025-61617 is a high-severity vulnerability affecting an unknown Android package that can lead to Denial of Service attacks. It is crucial for developers to update their applications to the patched version available from December 5, 2025, to ensure the security and reliability of their applications.
See every vulnerability recorded for :unknown: →
FAQ
CVE-2025-61617 is a vulnerability in an unknown Android package that can lead to a Denial of Service (DoS) attack.
You can check if your application is affected by using the Vulert playground at Vulert Scanner, which allows you to monitor for open-source vulnerabilities without needing to sign up.
Failing to address this vulnerability could result in your application becoming unresponsive, leading to a poor user experience and potential loss of users.
Yes, a patch is available as of December 5, 2025. It is recommended to update to the latest version of the affected package.
To update your package, modify the build.gradle file in your Android project to include the patched version number and then rebuild your application.
References
Related vulnerabilities
Recent vulnerabilities recorded for :unknown:.
