Local Privilege Escalation Vulnerability in DevicePolicyManagerService by Android

CVE-2025-48552

What is CVE-2025-48552?

In the DevicePolicyManagerService component of Android, a flaw exists in the 'saveGlobalProxyLocked' function, where a logic error could lead to desynchronization with the persistence layer. This vulnerability allows for local privilege escalation without requiring additional execution privileges or user interaction, potentially enabling unauthorized modifications to the device's security settings.

References