Service Denial in Android Framework by Malicious App

CVE-2025-48590

What is CVE-2025-48590?

A vulnerability exists in the Android Framework that enables a malicious application to exploit the resource handling mechanisms within AppOpsService.java. This flaw can disrupt the ability to dial emergency services in certain limited scenarios, resulting in a local denial of service. Crucially, this vulnerability can be exploited without requiring user interaction or elevated privileges, highlighting a substantial risk to user safety.

References