In multiple locations, there is a possible leak of an image across the Android User isolation boundary due to a confused deputy. This could lead to lo

ANDROID

04-09-2025 21:11

CVE-2025-48551 Vulnerabilidad documentada

5.0 MEDIUM

Tags

#android

#exploit

#cross

#image

#form

#add

#privilege

#execution

Descripción

In multiple locations, there is a possible leak of an image across the Android User isolation boundary due to confused deputy. This could lead local information disclosure with no additional execution privileges needed. interaction needed for exploitation.

https://android.googlesource.com/platform/packages/modules/IntentResolver/+/13c30b464d042f3e00899ffcf1c02b76bc35f769

https://source.android.com/security/bulletin/2025-09-01

Referencia

Link externo

Ver detalles

Fuente

https://nvd.nist.gov/vuln/detail/CVE-2025-48551

Resultados similares

Coincidentes en almenos en 50% de los tags

04-09-2025 CVE-2025-48543
In multiple locations, there is a possible way to escape chrome sandbox to attack android syste...
Ver información

04-09-2025 CVE-2025-26425
In multiple functions of RoleService.java, there is a possible permission squatting vulnerabili...
Ver información