CVE-2025-48650 in Android

요약

\~에 의해 MITRE • 2026. 03. 02.

In multiple locations, there is a possible information disclosure due to SQL injection. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• 책임이 있는: Google Android
• 예약하다: 2025. 05. 22.
• 공개: 2026. 03. 02.
• 모더레이션: 수락
• 항목: VDB-348453
• CPE: 준비됨
• CWE: CWE-89 (확인됨)
• CVSS: 8.4 (CISA-ADP)
• EPSS: 0.00004
• KEV: 아니요
• 활동: 매우 낮음
• 부문: Police, Finance, ...

출처

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-48650
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-48650
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-48650/