CVE-2025-48597: High severity Google Android vulnerability
In multiple locations, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-48597?
CVE-2025-48597 is considered a moderate severity vulnerability that allows local escalation of privileges.
How does CVE-2025-48597 exploit a system?
CVE-2025-48597 exploits a tapjacking or overlay attack that can trick users into granting permissions without their knowledge.
Which versions of Android are affected by CVE-2025-48597?
CVE-2025-48597 affects Google Android versions 14.0, 15.0, and 16.0.
How can I mitigate CVE-2025-48597?
To mitigate CVE-2025-48597, ensure that you update your Android device to the latest security patches from Google.
Is user interaction required for CVE-2025-48597 to be exploited?
No, user interaction is not needed for exploitation of CVE-2025-48597.