Skip to content
OpenAdvisories
High · 7.8 CVE-2025-48566 EUVD-2025-201777GHSA-xjwj-66mm-h5fw

In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege wit…

Published Dec 8, 2025 · Updated Sep 8, 2026 · Assigned by google_android

Vendor: Google Product: Android Platform: Android

Description

In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android 17, 16-qpr2, 16, 15, 14 —

Advisories 3

References