Privilege Escalation Vulnerability in Android Device Face Unlock Settings
CVE-2025-48598

6.6MEDIUM

Key Information:

Vendor

Google
Status
Android
Vendor
CVE Published:
8 December 2025

What is CVE-2025-48598?

A vulnerability exists in Android devices that may allow an attacker to modify the primary user's face unlock settings without requiring any user interaction. This vulnerability occurs in multiple locations within the system, potentially allowing unauthorized users to gain elevated privileges. As a result, attackers may leverage this flaw to bypass security measures, leading to unauthorized access to user data and device functionality.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Android 16

References

https://android.googlesource.com/platform/packages/apps/S...
https://source.android.com/security/bulletin/2025-12-01

CVSS V3.1

Score:
6.6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.