PT-2025-36078 · Unknown · Appopsservice.Java

Published 2025-09-01 · Updated 2025-09-04 · CVE-2025-48559

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions AppOpsService.java (affected versions not specified)

Description The software contains a flaw in multiple functions of AppOpsService.java due to improper input validation. This can allow an attacker to add a large amount of app ops, potentially leading to a local denial of service. User interaction is not required for exploitation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ASB-A-416491779

BDU:2025-11676

CVE-2025-48559

Affected Products

Appopsservice.Java

References · 10

• https://android.googlesource.com/platform/frameworks/base/+/7b88db4928f390cb7656dcc4a14fac2d645301a9 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-48559 · Security Note
• https://source.android.com/security/bulletin/2025-09-01 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-48559 · Vendor Advisory
• https://osv.dev/vulnerability/ASB-A-416491779 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-11676 · Security Note
• https://android.googlesource.com/platform/frameworks/base/+/f745b6763bffabb0d28e17efbcef5b1d261b5814 · Note
• https://t.me/CVEtracker/31723 · Telegram Post
• https://android.googlesource.com/platform/frameworks/base/+/f38b9f07a1aa39a1a7cf67fc27719e190b421be8 · Note
• https://twitter.com/CVEnew/status/1963677387180167431 · Twitter Post