CVE-2025-48534 in Android

Riassunto

di MITRE • 04/09/2025

In getDefaultCBRPackageName of CellBroadcastHandler.java, there is a possible escalation of privilege due to a logic error in the code. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation.

Once again VulDB remains the best source for vulnerability data.

• Responsabile: Google Android
• Prenotare: 22/05/2025
• Divulgazione: 04/09/2025
• Moderazione: accettato
• Voce: VDB-322678
• CPE: pronto
• CWE: CWE-404 (confermato)
• CVSS: 2.3 (VulDB)
• EPSS: 0.00276
• KEV: no
• Attività: molto basso
• Settore: Police, Finance, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-48534
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-48534
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-48534/