Local Privilege Escalation in WifiScanModeActivity by Android

CVE-2025-48599

What is CVE-2025-48599?

A potential local privilege escalation vulnerability has been identified in the WifiScanModeActivity component of the Android Settings app. Due to a missing permission check in multiple functions, this flaw may allow attackers to bypass device config restrictions effortlessly. Notably, exploitation does not require any execution privileges and does not necessitate user interaction, making it a significant concern for device security. Addressing this vulnerability is essential to maintain the integrity and security of Android devices.

References