CVE-2025-48572 is a critical permissions bypass vulnerability affecting Google Android, allowing for local escalation of privilege by launching activities from the background. This flaw has a CVSS score of 7.8 (HIGH) due to its low attack complexity, requiring no user interaction or additional execution privileges, and leading to high impacts on confidentiality, integrity, and availability. The vulnerability is actively exploited in the wild, as confirmed by its presence in the KEV catalog, and has garnered significant community discussion and media coverage, despite a lack of public exploit code on platforms like Metasploit or ExploitDB.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
13.0CPE matchmatch criteria | cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:* | ||
14.0CPE matchmatch criteria | cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:* | ||
15.0CPE matchmatch criteria | cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:* | ||
16.0CPE matchmatch criteria | cpe:2.3:o:google:android:16.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.