CVE-2025-48525 in Androidالمعلومات

الملخص

بحسب MITRE • 08/12/2025

In disassociate of DisassociationProcessor.java, there is a possible way for an app to continue reading notifications when not associated to a companion device due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

مسؤول

Google Android

حجز

22/05/2025

إفشاء

08/12/2025

الاعتدال

تمت الموافقة

إدخال

VDB-334862

EPSS

0.00093

KEV

لا

النشاطات

منخفض جدًا

المصادر

Want to stay up to date on a daily basis?

Enable the mail alert feature now!