CVE-2025-48571: Medium severity Google Android vulnerability
In multiple functions of btmsec.cc, there is a possible way for an attacker to intercept SMS messages due to a logic error in the code. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-48571?
CVE-2025-48571 has a risk score of 47, indicating a moderate severity level.
How do I fix CVE-2025-48571?
To fix CVE-2025-48571, users should ensure their Google Android device is updated to the latest security patches provided by Google.
What impact does CVE-2025-48571 have on users?
CVE-2025-48571 allows attackers to potentially intercept SMS messages, leading to remote information disclosure.
Is user interaction required to exploit CVE-2025-48571?
Yes, user interaction is needed for the exploitation of CVE-2025-48571.
Which software is affected by CVE-2025-48571?
CVE-2025-48571 affects Google Android software, particularly in the functions located in btm_sec.cc.