CVE-2025-48535: High severity Google Android vulnerability
In assertSafeToStartCustomActivity of AppRestrictionsFragment.java , there is a possible way to exploit a parcel mismatch resulting in a launch anywhere vulnerability due to unsafe deserialization. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-48535?
CVE-2025-48535 is classified as a high-severity vulnerability due to its potential for local escalation of privilege.
How do I fix CVE-2025-48535?
To address CVE-2025-48535, ensure you update your Android software to the latest version that includes the security patches.
Who is affected by CVE-2025-48535?
CVE-2025-48535 affects devices running vulnerable versions of the Google Android operating system.
What is the impact of CVE-2025-48535?
The impact of CVE-2025-48535 includes a risk of unauthorized privilege escalation due to unsafe deserialization.
Can CVE-2025-48535 be exploited remotely?
CVE-2025-48535 requires local access to the device for successful exploitation.