PT-2025-43506 · Google · Android Framework

CVE-2025-48633 · Published 2025-10-23 · Updated 2026-06-02

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Android (affected versions not specified)

Description The issue resides in the hasAccountsOnAnyUser function within DevicePolicyManagerService.java. A logic error in the code allows for the addition of a Device Owner after provisioning. This can lead to local escalation of privilege without requiring additional execution privileges or user interaction. The vulnerability is related to insufficient protection of sensitive data within the Android Framework. This issue is actively exploited. Numerous articles have been published regarding this vulnerability, indicating significant attention from the security community.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

ASB-A-417988098

BDU:2025-14993

BDU:2025-15136

CVE-2025-48633

Affected Products

Android Framework

References · 80

• https://android.googlesource.com/platform/frameworks/base/+/d00bcda9f42dcf272d329e9bf9298f32af732f93 · Patch
• https://bdu.fstec.ru/vul/2025-14993 · Security Note
• https://source.android.com/security/bulletin/2025-12-01 · Vendor Advisory
• https://osv.dev/vulnerability/ASB-A-417988098 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-48633 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-48633 · Security Note
• https://source.android.com/docs/security/bulletin/2025-12-01 · Security Note
• https://bdu.fstec.ru/vul/2025-15136 · Security Note
• https://reddit.com/r/sysadmin/comments/1pceedn/googles_december_android_patch_fixes_107_bugs · Reddit Post
• https://twitter.com/AsensoDerrick3/status/1995745437093933420 · Twitter Post
• https://twitter.com/stooee_/status/2002454048507642140 · Twitter Post
• https://twitter.com/DarkWebInformer/status/1995984854748373362 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1pd1aqq/top_10_trending_cves_03122025 · Reddit Post
• https://twitter.com/evanderburg/status/1995868392319037737 · Twitter Post
• https://twitter.com/aspidaHQ/status/1998791806088261656 · Twitter Post