CVE-2025-48585: Input Validation

Published Mar 2, 2026

Updated

In multiple functions of ProfilingService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Software

4 affected components

Google Android=16.0

Google Android=16.0-qpr2_beta_1

Google Android=16.0-qpr2_beta_2

Google Android=16.0-qpr2_beta_3

Event History

Mar 2, 2026

CVE Published

via MITRE·06:42 PM

Data Sourced

via MITRE·06:42 PM

DescriptionWeakness

Data Sourced

via NVD·07:16 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-48585?

CVE-2025-48585 has a severity rating of medium due to its potential for a persistent denial of service.

How do I fix CVE-2025-48585?

To fix CVE-2025-48585, it is recommended to update to the latest version of the affected Google Android software that addresses the input validation issues.

What software is affected by CVE-2025-48585?

CVE-2025-48585 affects Google Android version 16.0 and its beta releases (qpr2_beta_1, qpr2_beta_2, qpr2_beta_3).

What kind of vulnerability is CVE-2025-48585?

CVE-2025-48585 is a denial of service vulnerability caused by improper input validation in ProfilingService.java.

Is user interaction required to exploit CVE-2025-48585?

No, user interaction is not required to exploit CVE-2025-48585, making it easier for malicious actors to carry out an attack.