CVE-2025-48525 in Androidinformação

Sumário

de MITRE • 08/12/2025

In disassociate of DisassociationProcessor.java, there is a possible way for an app to continue reading notifications when not associated to a companion device due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Responsável

Google Android

Reservar

22/05/2025

Divulgação

08/12/2025

Moderação

aceite

Entrada

VDB-334862

CPE

pronto

EPSS

0.00093

KEV

não

Atividades

muito baixo

Fontes

Do you want to use VulDB in your project?

Use the official API to access entries easily!