CVE-2025-48625: Race Condition

Published Dec 8, 2025

Updated

In multiple locations of UsbDataAdvancedProtectionHook.java, there is a possible way to access USB data when the screen is off due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Software

1 affected component

Google Android=16.0

Event History

Dec 8, 2025

CVE Published

via MITRE·05:27 PM

Data Sourced

via MITRE·05:27 PM

DescriptionWeakness

Data Sourced

via NVD·06:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-48625?

CVE-2025-48625 has a high severity rating due to the potential for local escalation of privilege.

How do I fix CVE-2025-48625?

To mitigate CVE-2025-48625, ensure that your device is updated to the latest security patch released by Google.

What devices are affected by CVE-2025-48625?

CVE-2025-48625 affects devices running Google Android version 16.0.

Can CVE-2025-48625 be exploited without user interaction?

Yes, CVE-2025-48625 can be exploited without any user interaction due to its design flaw.

What is the nature of the vulnerability in CVE-2025-48625?

CVE-2025-48625 is a race condition vulnerability that allows access to USB data when the screen is off.