CVE-2025-48580: High severity Google Android vulnerability
In connectInternal of MediaBrowser.java, there is a possible way to access while in use permission while the app is in background due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-48580?
CVE-2025-48580 has a high severity rating due to its ability to allow local escalation of privilege.
How do I fix CVE-2025-48580?
To remediate CVE-2025-48580, you should update to the latest version of Android that addresses the vulnerability.
Which versions of Android are affected by CVE-2025-48580?
CVE-2025-48580 affects Google Android versions 13.0, 14.0, 15.0, and 16.0.
What impact does CVE-2025-48580 have on user privacy?
CVE-2025-48580 may lead to unauthorized access to permissions while the app is running in the background, potentially compromising user privacy.
Is user interaction required to exploit CVE-2025-48580?
No, user interaction is not needed to exploit CVE-2025-48580, making it more dangerous.