CVE-2025-48633

Name of the Vulnerable Software and Affected Versions Android (affected versions not specified)

Description The issue resides in the

hasAccountsOnAnyUser

function within

DevicePolicyManagerService.java

. A logic error in the code allows for the addition of a Device Owner after provisioning. This can lead to local escalation of privilege without requiring additional execution privileges or user interaction. The vulnerability is related to insufficient protection of sensitive data within the Android Framework. This issue is actively exploited. Numerous articles have been published regarding this vulnerability, indicating significant attention from the security community.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.