CVE-2025-48612 in Androidالمعلومات

الملخص

بحسب MITRE • 08/12/2025

In setDefaultKey of DefaultPaymentSettings.java, there is a possible way for an application to set the main user's default NFC payment setting due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

مسؤول

Google Android

حجز

22/05/2025

إفشاء

08/12/2025

الاعتدال

تمت الموافقة

إدخال

VDB-334844

EPSS

0.00010

KEV

لا

النشاطات

منخفض جدًا

المصادر

Want to stay up to date on a daily basis?

Enable the mail alert feature now!