Local Privilege Escalation Vulnerability in Android MediaSessionRecord

CVE-2025-48573

What is CVE-2025-48573?

A vulnerability in the MediaSessionRecord component of the Android Framework allows for local privilege escalation. The flaw arises from a potential abuse of the foreground service launch while the application operates in the background. This can be exploited without requiring user interaction or additional execution privileges, posing a threat to user data and application integrity.

References