Privilege Escalation Vulnerability in Android Device Face Unlock Settings

CVE-2025-48598

What is CVE-2025-48598?

A vulnerability exists in Android devices that may allow an attacker to modify the primary user's face unlock settings without requiring any user interaction. This vulnerability occurs in multiple locations within the system, potentially allowing unauthorized users to gain elevated privileges. As a result, attackers may leverage this flaw to bypass security measures, leading to unauthorized access to user data and device functionality.

References