PT-2025-43459 · Google · Android

CVE-2025-48565 · Publicado 2025-10-23 · Atualizado 2026-07-11

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Android (affected versions not specified)

Description A flaw exists in the Android Framework component related to insufficient protection of system data. Successful exploitation may allow a remote attacker to elevate privileges. The issue involves a logic error in the code that could allow bypassing the cross profile intent filter, potentially leading to local privilege escalation without requiring additional execution privileges or user interaction.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

BDU:2025-15001

CVE-2025-48565

Produtos afetados

Android

Referências · 12

• https://reddit.com/r/S24Ultra/comments/1utknnw/google_play_store_update_for_july_details · Publicação no Reddit
• https://reddit.com/r/androiddev/comments/1oe10qe/checking_if_my_android_devices_have_critical_high · Publicação no Reddit
• https://bdu.fstec.ru/vul/2025-15001 · Nota de Segurança
• https://android.googlesource.com/platform/frameworks/base/+/0f3e248787d88154c8592f6e055b6b3586f4877d · Correção
• https://source.android.com/docs/security/bulletin/2025-12-01?hl=ru · Nota
• https://android.googlesource.com/platform/packages/modules/IntentResolver/+/4e6cf5285d0b1725fb9141e810050cfdb3fb42fd · Correção
• https://twitter.com/CVEnew/status/1998079601164132793 · Publicação no Twitter
• https://android.googlesource.com/platform/frameworks/base/+/28579dff4305f764302d85f95509671eafbf62ac · Correção
• https://t.me/cveNotify/145205 · Publicação no Telegram
• https://source.android.com/security/bulletin/2025-12-01 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2025-48565 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-48565 · Nota de Segurança