Input Validation Flaw in Android Framework Impacts CDM Association Management

CVE-2025-48632

What is CVE-2025-48632?

An input validation issue in the Android Framework's setDisplayName function within AssociationRequest.java allows for CDM associations to persist even after users attempt to disassociate them. This flaw poses a potential risk for local privilege escalation, as it requires no additional execution privileges and does not need user interaction to exploit. Addressing this vulnerability is crucial for maintaining secure user data management in Android systems.

References