CVE-2025-48584: Medium severity Google Android vulnerability
In multiple functions of NotificationManagerService.java, there is a possible way to bypass the per-package channel limits causing resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-48584?
The severity of CVE-2025-48584 is classified as medium due to its potential to cause local denial of service.
How do I fix CVE-2025-48584?
To fix CVE-2025-48584, update your affected Android device to the latest version provided by Google.
What vulnerabilities are associated with CVE-2025-48584?
CVE-2025-48584 is associated with resource exhaustion vulnerabilities due to insufficient channel limits in the NotificationManagerService.
Who is affected by CVE-2025-48584?
CVE-2025-48584 affects users of Android version 16.0 and may impact devices running this version of the operating system.
Can CVE-2025-48584 be exploited remotely?
CVE-2025-48584 cannot be exploited remotely as it requires no additional execution privileges or user interaction.