PT-2025-43471 · Android · Android

Published 2025-10-23 · Updated 2026-03-30 · CVE-2025-48582

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions (affected versions not specified)

Description There is a potential for media deletion without the necessary MANAGE EXTERNAL STORAGE permission due to an intent redirect. This could result in local escalation of privilege and does not require user interaction for exploitation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

ASB-A-369105011

CVE-2025-48582

Affected Products

Android

References · 11

• https://osv.dev/vulnerability/ASB-A-369105011 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-48582 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-48582 · Security Note
• https://source.android.com/docs/security/bulletin/2026/2026-03-01 · Vendor Advisory
• https://reddit.com/r/androiddev/comments/1oe10qe/checking_if_my_android_devices_have_critical_high · Reddit Post
• https://source.android.com/security/bulletin/2026-03-01 · Note
• https://android.googlesource.com/platform/packages/providers/MediaProvider/+/1b7d4ce446d149a34d8b317d41127379f017165d · Note
• https://twitter.com/cracbot/status/2029512454728995171 · Twitter Post
• https://twitter.com/cracbot/status/2029874921141322109 · Twitter Post
• https://twitter.com/TheHackerWire/status/2028775692238987567 · Twitter Post
• https://twitter.com/DavidMarquet19/status/2038511679047094344 · Twitter Post