CVE-2025-48598: Medium severity Google Android vulnerability
In multiple locations, there is a possible way to alter the primary user's face unlock settings due to a confused deputy. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-48598?
The severity of CVE-2025-48598 is classified as a high impact vulnerability due to its potential for physical escalation of privilege.
How do I fix CVE-2025-48598?
To fix CVE-2025-48598, ensure that your device is updated to the latest security patch provided by Google for Android 16.0.
What systems are affected by CVE-2025-48598?
CVE-2025-48598 affects devices running Google Android version 16.0 and potentially earlier versions.
What are the consequences of CVE-2025-48598?
The consequence of CVE-2025-48598 can lead to unauthorized changes to the primary user's face unlock settings.
Is user interaction required to exploit CVE-2025-48598?
No, user interaction is not required to exploit CVE-2025-48598, making it more dangerous.