Potential Browser Interaction Vulnerability in Android Telephony Framework

CVE-2025-48618

What is CVE-2025-48618?

A flaw in the processLaunchBrowser method of the CommandParamsFactory.java file could allow unauthorized browser interactions from the lock screen. This vulnerability stems from improper locking mechanisms, which may enable physical escalation of privilege without requiring additional execution permissions or user interaction for exploitation. This poses a significant security risk, necessitating prompt updates to secure affected systems.

References