PT-2025-36079 · Google · Android

Published 2025-09-01 · Updated 2025-09-04 · CVE-2025-48560

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Android (affected versions not specified)

Description An issue exists in Android where an application may be able to monitor motion events due to a confused deputy condition. This could result in local information disclosure without requiring additional execution privileges or user interaction.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-441

Related Identifiers

ASB-A-419110583

BDU:2025-11552

CVE-2025-48560

Affected Products

Android

References · 11

• https://source.android.com/security/bulletin/wear/2025-09-01 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-48560 · Security Note
• https://bdu.fstec.ru/vul/2025-11552 · Security Note
• https://osv.dev/vulnerability/CVE-2025-48560 · Vendor Advisory
• https://osv.dev/vulnerability/ASB-A-419110583 · Vendor Advisory
• https://source.android.com/security/bulletin/2025-09-01 · Note
• https://t.me/CVEtracker/31724 · Telegram Post
• https://android.googlesource.com/platform/frameworks/base/+/a42c894ef7c62159cfc97b38409ffaa43d7f4eaf · Note
• https://android.googlesource.com/platform/frameworks/base/+/580118ec5b41075c21fb0d9d6edcf5c89ebbc799 · Note
• https://android.googlesource.com/platform/frameworks/base/+/ff8b0d46a53a8317b68f534ace4e43ee5b1538b3 · Note
• https://twitter.com/CVEnew/status/1963677385900875876 · Twitter Post