CVE-2025-48579: High severity Google Android vulnerability
In multiple functions of MediaProvider.java, there is a possible external storage write permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Android devices are affected if they include the vulnerable MediaProvider.java functionality. Exploitation requires local access, so it is not described as remotely exploitable.
What does an attacker need to exploit it?
An attacker needs local access but no privileges, user interaction, or additional execution privileges. The issue may allow bypassing external-storage write permissions through a confused-deputy condition.
What is the potential impact?
Successful exploitation can result in local privilege escalation and unauthorized writes to external storage. The CVSS vector indicates high confidentiality, integrity, and availability impact.