Audio Recording Vulnerability in Android Framework by Google

CVE-2025-48549

What is CVE-2025-48549?

This vulnerability allows malicious apps to record audio in the background without proper permission checks. It exposes users to potential exploitation as no user interaction is required for an attacker to exploit this flaw. The issue manifests across multiple locations within the Android framework, enabling escalation of privileges that could compromise user privacy.

References