Local Privilege Escalation Vulnerability in Android Voice Interaction Manager by Google

CVE-2025-48629

What is CVE-2025-48629?

In the Voice Interaction Manager Service, a misconfiguration allows an attacker to establish themselves as the default speech recognizer app. This occurs due to an insecure default value, enabling potential exploitation without the need for user interaction or elevated execution privileges. The vulnerability underscores the importance of secure defaults to prevent unintentional escalation of privileges.

References