Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Microsoft Security Blog

Google Project Zero

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

In the function process_crypto_cmd, the values of ptrs[i] can be potentially equal to NULL which is valid value after calling slice_map_array(). Later this values will be derefenced without prior NULL check, which can lead to local Temporary DoS or OOB Read, leading to information disclosure.

CVE-2025-27701 is a medium-severity vulnerability affecting the Android kernel, specifically within the function process_crypto_cmd. The issue arises because the function handles an array of pointers (ptrs[i]) that can potentially be NULL after a call to slice_map_array(). However, these pointers are dereferenced later in the code without a prior NULL check. This improper handling can lead to an out-of-bounds (OOB) read or a local temporary denial of service (DoS). The OOB read can cause information disclosure by allowing an attacker to read memory contents that should not be accessible, potentially leaking sensitive data. The vulnerability is classified under CWE-476 (NULL Pointer Dereference), which typically results in crashes or unintended behavior. The CVSS v3.1 base score is 5.5, indicating a medium severity, with the vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. This means the attack requires local access with low complexity, low privileges, no user interaction, and impacts confidentiality with high impact but no impact on integrity or availability. No known exploits are currently reported in the wild, and no patches have been linked yet. The vulnerability affects the Android kernel, which is a core component of Android devices, implying that devices running vulnerable kernel versions could be impacted. Exploitation requires local access and some privileges, which limits the attack surface primarily to local users or malicious apps with some kernel interaction capabilities.

Detailed information about CVE-2025-27701: Information disclosure in Google Android affecting Google Android. Get real-time updates, technical details, and miti

CVE-2025-27701: Information disclosure in Google Android - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-27701: Information disclosure in Google Android

Threats Tagged 'cve-2025-27701'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-27701'

Lead Pen Test Professional