CVE-2025-48648: Medium severity Google Android vulnerability

Published Jun 1, 2026

Updated

In isSameApp of NotificationManagerService.java, there is a possible persistent dos due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Software

4 affected components

Google Android

Google Android=14.0

Google Android=15.0

Google Android=16.0

Event History

Jun 1, 2026

CVE Published

via MITRE·09:14 PM

Data Sourced

via MITRE·09:14 PM

DescriptionWeakness

Data Sourced

via NVD·10:16 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-48648?

The severity of CVE-2025-48648 is rated as medium with a CVSS score of 5.5.

What does CVE-2025-48648 affect?

CVE-2025-48648 affects the Google Android operating system, specifically in the NotificationManagerService component.

How does CVE-2025-48648 impact users?

CVE-2025-48648 can lead to a local denial of service due to resource exhaustion without needing additional execution privileges.

Is user interaction required to exploit CVE-2025-48648?

No, user interaction is not needed to exploit CVE-2025-48648.

How can I mitigate CVE-2025-48648?

Mitigation for CVE-2025-48648 involves ensuring that your Google Android device is updated to the latest security patches.