CVE-2025-48632: Input Validation
In setDisplayName of AssociationRequest.java, there is a possible way to cause CDM associations to persist after the user has disassociated them due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-48632?
CVE-2025-48632 has a medium severity rating due to potential local privilege escalation from improper input validation.
How do I fix CVE-2025-48632?
To fix CVE-2025-48632, users should update their Android devices to the latest version that addresses this vulnerability.
What versions of Android are affected by CVE-2025-48632?
CVE-2025-48632 affects Android versions 14.0, 15.0, and 16.0.
What type of vulnerability is CVE-2025-48632?
CVE-2025-48632 is an input validation issue that can lead to local escalation of privilege.
Is user interaction required to exploit CVE-2025-48632?
No, user interaction is not required to exploit CVE-2025-48632.