CVE-2025-48627: High severity Google Android vulnerability
In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible way to launch an activity from the background due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-48627?
CVE-2025-48627 has a critical severity rating due to the potential for local escalation of privilege.
How do I fix CVE-2025-48627?
To resolve CVE-2025-48627, update your Android devices to the latest versions that include the security patch.
Which versions of Android are affected by CVE-2025-48627?
CVE-2025-48627 affects Android versions 13.0 and 14.0.
What type of vulnerability is CVE-2025-48627?
CVE-2025-48627 is a local escalation of privilege vulnerability due to a logic error in the ActivityTaskManagerService.
Is user interaction required for CVE-2025-48627?
No, user interaction is not required to exploit CVE-2025-48627.