Local Privilege Escalation Vulnerability in Android Framework by Google

CVE-2025-48546

What is CVE-2025-48546?

The vulnerability arises from a logic error in the checkPermissions method of SafeActivityOptions.java within the Android framework. This flaw allows an attacker to potentially launch background activities without needing additional execution privileges or user interaction, leading to a local escalation of privileges. This could compromise the security of the affected devices by allowing unauthorized access to sensitive operations.

References