CVE-2025-48559: Input Validation
Published Sep 2, 2025
·Updated
In multiple functions of AppOpsService.java, there is a possible add a large amount of app ops due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
5 affected components
Google Android
Google Android=13.0
Google Android=14.0
Google Android=15.0
Google Android=16.0
Remediation
Event History
Sep 2, 2025
CVE Published
via Android·12:00 AM
Data Sourced
via Android·12:00 AM
SeverityWeaknessAffected Software
Sep 4, 2025
CVE Published
via MITRE·06:34 PM
Data Sourced
via MITRE·06:34 PM
DescriptionWeakness
Data Sourced
via NVD·07:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-48559?
The severity of CVE-2025-48559 is classified as high due to its potential to cause local denial of service.
2
How do I fix CVE-2025-48559?
To fix CVE-2025-48559, ensure that your Android device is updated to the latest security patch provided by Google.
3
What systems are affected by CVE-2025-48559?
CVE-2025-48559 affects multiple versions of Google Android.
4
Can CVE-2025-48559 be exploited without user interaction?
Yes, CVE-2025-48559 can be exploited without any user interaction required.
5
What type of vulnerability is CVE-2025-48559?
CVE-2025-48559 is an input validation vulnerability that can lead to local denial of service.