PT-2025-49573 · Unknown · Wifiscanmodeactivity.Java

Published 2025-08-12 · Updated 2025-12-08 · CVE-2025-48599

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WifiScanModeActivity.java (affected versions not specified)

Description The software contains a potential issue where a device configuration restriction can be bypassed due to a missing permission check in multiple functions within WifiScanModeActivity.java. This could allow for local escalation of privilege without requiring additional execution privileges or user interaction.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

ASB-A-299633613

BDU:2026-00771

CVE-2025-48599

Affected Products

Wifiscanmodeactivity.Java

References · 7

• https://source.android.com/security/bulletin/2025-12-01 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-48599 · Security Note
• https://bdu.fstec.ru/vul/2026-00771 · Security Note
• https://osv.dev/vulnerability/ASB-A-299633613 · Vendor Advisory
• https://android.googlesource.com/platform/packages/apps/Settings/+/7a792e0b8f68bc4aeb939af703790fd76b51ccbd · Patch
• https://osv.dev/vulnerability/CVE-2025-48599 · Vendor Advisory
• https://twitter.com/CVEnew/status/1998079582755311876 · Twitter Post