CVE-2025-48538: Input Validation
In setApplicationHiddenSettingAsUser of PackageManagerService.java, there is a possible way to hide a system critical package due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-48538?
The severity of CVE-2025-48538 is classified as medium due to its potential for local denial of service.
How do I fix CVE-2025-48538?
To fix CVE-2025-48538, update your Android device to the latest security patch provided by Google.
What is CVE-2025-48538?
CVE-2025-48538 is a vulnerability in Android's PackageManagerService that allows the hiding of critical system packages due to improper input validation.
Who is affected by CVE-2025-48538?
CVE-2025-48538 affects users of Google Android devices that are running vulnerable versions of the operating system.
Is user interaction needed to exploit CVE-2025-48538?
No, user interaction is not needed to exploit CVE-2025-48538, making it easier to exploit.