File Reading Vulnerability in Android Messaging Services

CVE-2025-48604

What is CVE-2025-48604?

This vulnerability affects Android Messaging Services where a missing permission check in multiple locations allows for potential unauthorized file access. As a result, sensitive user information may be disclosed, compromising privacy without requiring additional execution privileges. The exploitation of this flaw does not necessitate user interaction, thereby increasing the risk of malicious actors accessing confidential data.

References