CVE-2025-48589: High severity Google Android vulnerability
In multiple functions of HeaderPrivacyIconsController.kt, there is a possible way to grand permissions across user due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-48589?
CVE-2025-48589 has a high severity due to its potential for local privilege escalation without user interaction.
How do I fix CVE-2025-48589?
To fix CVE-2025-48589, update your device to the latest version of Android which includes the security patch for this vulnerability.
Which Android versions are affected by CVE-2025-48589?
CVE-2025-48589 affects Android versions 13.0, 14.0, 15.0, and 16.0.
Can CVE-2025-48589 be exploited remotely?
No, CVE-2025-48589 requires local access to the device for exploitation.
What are the consequences of exploiting CVE-2025-48589?
Exploiting CVE-2025-48589 could allow an attacker to gain elevated privileges, potentially compromising the device's security.