CVE-2025-48555: High severity Google Android vulnerability
In multiple functions of NotificationStation.java, there is a possible cross-profile information disclosure due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-48555?
The severity of CVE-2025-48555 is considered critical due to its potential for local escalation of privilege.
How do I fix CVE-2025-48555?
To fix CVE-2025-48555, users should update their Android devices to the latest version provided by Google.
What types of devices are affected by CVE-2025-48555?
CVE-2025-48555 affects multiple versions of Google Android, specifically versions 13.0 through 16.0.
Is user interaction required to exploit CVE-2025-48555?
No, user interaction is not needed for the exploitation of CVE-2025-48555.
What impact does CVE-2025-48555 have on my system?
CVE-2025-48555 can lead to cross-profile information disclosure, potentially compromising sensitive data.