Local Privilege Escalation in Android Media Provider Component
CVE-2025-48532

7.3HIGH

Key Information:

Vendor

Google
Status
Android
Vendor
CVE Published:
4 September 2025

What is CVE-2025-48532?

A vulnerability exists in the markMediaAsFavorite function of MediaProvider.java within the Android operating system, which may allow an attacker to bypass the WRITE_EXTERNAL_STORAGE permission. This problem arises due to a confused deputy scenario. By exploiting this weakness, a malicious actor could escalate their privileges on a device without the need for additional execution privileges. User interaction is required for this exploitation, making it essential for users to stay informed and exercise caution.

Affected Version(s)

Android 16

References

https://source.android.com/security/bulletin/2025-09-01

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-48532 : Local Privilege Escalation in Android Media Provider Component