CVE-2025-48526: Input Validation
In createMultiProfilePagerAdapter of ChooserActivity.java , there is a possible way for an app to launch the ChooserActivity in another profile due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-48526?
CVE-2025-48526 has a high severity rating due to its potential for local escalation of privilege.
Which versions of Android are affected by CVE-2025-48526?
CVE-2025-48526 affects Google Android versions 13.0, 14.0, 15.0, and 16.0.
How do I fix CVE-2025-48526?
To fix CVE-2025-48526, ensure you're using the latest version of Android that has addressed this vulnerability.
What type of vulnerability is CVE-2025-48526?
CVE-2025-48526 is a local escalation of privilege vulnerability due to improper input validation.
What is the impact of CVE-2025-48526 on users?
The impact of CVE-2025-48526 allows an app to potentially launch the ChooserActivity in another profile, leading to unauthorized access.