File Access Vulnerability in Android System By Google
CVE-2025-48591

Currently unrated

Key Information:

Vendor

Google

Status
Vendor
CVE Published:
8 December 2025

What is CVE-2025-48591?

This vulnerability allows unauthorized file access across multiple locations within the Android system framework due to a missing permission check. As a result, it may lead to local information disclosure without requiring any additional user privileges or interaction. This issue poses a significant risk as it can potentially expose sensitive user data to other account holders on the device.

Affected Version(s)

Android 15

Android 14

Android 13

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-48591 : File Access Vulnerability in Android System By Google