SMS Message Interception Vulnerability in Android Products
CVE-2025-48571

4.3MEDIUM

Key Information:

Vendor

Google
Status
Android
Vendor
CVE Published:
17 June 2026

What is CVE-2025-48571?

A vulnerability exists in the btm_sec.cc component of Android where a logic error may allow an attacker to intercept SMS messages. This flaw could lead to remote information disclosure without requiring additional execution privileges. Exploitation of this vulnerability necessitates user interaction, making it critical for users to remain vigilant against potential threats.

Affected Version(s)

Android 17

References

https://source.android.com/docs/security/bulletin/android-17

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.