CVE-2025-48545 in Androidinfo

Zusammenfassung

von MITRE • 04.09.2025

In isSystemUid of AccountManagerService.java, there is a possible way for an app to access privileged APIs due to a confused deputy. This could lead to local privilege escalation with no additional execution privileges needed. User interaction is not needed for exploitation.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Zuständig

Google Android

Reservieren

22.05.2025

Veröffentlichung

04.09.2025

Moderieren

akzeptiert

Eintrag

VDB-322701

CPE

bereit

EPSS

0.00003

KEV

nein

Aktivitäten

very low

Sektor

Police, Homeoffice, ...

Quellen

MITREhttps://www.cve.org/CVERecord?id=CVE-2025-48545
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2025-48545
CVE Detailshttps://www.cvedetails.com/cve/CVE-2025-48545/

◂ ZurückÜbersichtWeiter ▸

Interested in the pricing of exploits?

See the underground prices here!