CVE-2025-48526

Description

In createMultiProfilePagerAdapter of ChooserActivity.java , there is a possible way for an app to launch the ChooserActivity in another profile due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

PUBLISHED Reserved 2025-05-22 | Published 2025-09-04 | Updated 2026-02-26 | Assigner google_android

Problem types

Elevation of privilege

Product status

References

android.googlesource.com/...ac9d4b366097a8912a04e40e85111ed4

source.android.com/security/bulletin/2025-09-01

cve.org (CVE-2025-48526)

nvd.nist.gov (CVE-2025-48526)

Download JSON