CVE-2025-48575: High severity Google Android vulnerability
In multiple functions of CertInstaller.java, there is a possible way to install certificates due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-48575?
CVE-2025-48575 is considered a high severity vulnerability due to its potential for local escalation of privilege.
How do I fix CVE-2025-48575?
To fix CVE-2025-48575, users should update their Android devices to the latest version that includes the patch for this vulnerability.
What impact does CVE-2025-48575 have on Android devices?
CVE-2025-48575 can allow an attacker to install certificates without proper permissions, leading to possible unauthorized access.
Does CVE-2025-48575 require user interaction for exploitation?
CVE-2025-48575 does not require user interaction for exploitation, making it particularly concerning for users.
Which versions of Android are affected by CVE-2025-48575?
CVE-2025-48575 affects various versions of Android that include the vulnerable CertInstaller.java functions.