CVE-2025-48566

Description

In multiple locations, there is a possible bypass of user profile boundary with a forwarded intent due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

PUBLISHED Reserved 2025-05-22 | Published 2025-12-08 | Updated 2025-12-09 | Assigner google_android

Problem types

Elevation of privilege

Product status

References

android.googlesource.com/...4305f764302d85f95509671eafbf62ac

android.googlesource.com/...87d88154c8592f6e055b6b3586f4877d

android.googlesource.com/...5d0b1725fb9141e810050cfdb3fb42fd

source.android.com/security/bulletin/2025-12-01

cve.org (CVE-2025-48566)

nvd.nist.gov (CVE-2025-48566)

Download JSON