CVE-2025-48525 in Androidinformación

Resumen

por MITRE • 2025-12-08

In disassociate of DisassociationProcessor.java, there is a possible way for an app to continue reading notifications when not associated to a companion device due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

Google Android

Reservar

2025-05-22

Divulgación

2025-12-08

Moderación

aceptado

Artículo

VDB-334862

CPE

listo

EPSS

0.00093

KEV

no

Actividades

muy bajo

Sector

Insurance, Homeoffice, ...

Fuentes

MITREhttps://www.cve.org/CVERecord?id=CVE-2025-48525
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2025-48525
CVE Detailshttps://www.cvedetails.com/cve/CVE-2025-48525/

◂ AnteriorVisión De ConjuntoPróximo ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!