CVE-2025-48639: High severity Google Android vulnerability
In DefaultTransitionHandler.java, there is a possible way to unknowingly grant permissions to an app due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-48639?
CVE-2025-48639 is classified as a local escalation of privilege vulnerability with potential serious implications for user security.
How do I fix CVE-2025-48639?
To mitigate CVE-2025-48639, update your Android device to the latest version provided by Google that addresses this vulnerability.
Which versions of Android are affected by CVE-2025-48639?
CVE-2025-48639 affects Android versions 13.0, 14.0, 15.0, and 16.0.
What are the potential consequences of exploiting CVE-2025-48639?
Exploiting CVE-2025-48639 could allow an attacker to unknowingly grant permissions to an app, resulting in unauthorized access.
Is user interaction required to exploit CVE-2025-48639?
Yes, user interaction is necessary for an attacker to successfully exploit CVE-2025-48639.