Permissions Bypass in CertInstaller of Android Affected by Vulnerability

CVE-2025-48575

What is CVE-2025-48575?

The CertInstaller component of Android contains a vulnerability where improper handling of permissions allows an attacker to install certificates without the required authorization, leading to local privilege escalation. This exploit does not necessitate user interaction, making it particularly dangerous as it can be executed silently. Users and administrators are encouraged to update to the latest Android security patch to mitigate these risks.

References