Cross-User Image Leak in Android PrintManagerService

CVE-2025-48628

What is CVE-2025-48628?

A security concern exists in the PrintManagerService of Android, where the validateIconUserBoundary function can inadvertently expose images between users. This flaw could allow a potential local escalation of privilege without requiring additional execution privileges. Notably, the exploitation of this vulnerability does not necessitate user interaction, making it a significant risk for Android device security.

References