PT-2025-43483 · Google · Android

Published 2025-08-12 · Updated 2025-12-09 · CVE-2025-48598

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions (affected versions not specified)

Description A flaw exists that may allow alteration of the primary user's face unlock settings due to a confused deputy condition. Successful exploitation could lead to physical escalation of privilege without requiring additional execution privileges. User interaction is not required for exploitation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-610

CWE-441

Related Identifiers

ASB-A-418774489

BDU:2026-00775

CVE-2025-48598

Affected Products

Android

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2025-48598 · Security Note
• https://source.android.com/security/bulletin/2025-12-01 · Vendor Advisory
• https://android.googlesource.com/platform/packages/apps/Settings/+/83447688f8e3e8f009f1e7d275a14ea00ee7953a · Patch
• https://osv.dev/vulnerability/CVE-2025-48598 · Vendor Advisory
• https://osv.dev/vulnerability/ASB-A-418774489 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-00775 · Security Note
• https://twitter.com/CVEnew/status/1998079583719985202 · Twitter Post
• https://twitter.com/dailycve/status/1998358340674764930 · Twitter Post
• https://android.googlesource.com/platform/packages/modules/IntentResolver/+/bbe2dc3fb85fac9053b427b6d3c4af3506e0d9b4 · Note
• https://reddit.com/r/androiddev/comments/1oe10qe/checking_if_my_android_devices_have_critical_high · Reddit Post