Skip to content
OpenAdvisories
High · 7.0 CVE-2025-48625 EUVD-2025-201801GHSA-g8gf-4f4v-827x

In multiple locations of UsbDataAdvancedProtectionHook.java, there is a possible way to access USB data when the screen is off due to a rac…

Published Dec 8, 2025 · Updated Feb 26, 2026 · Assigned by google_android

Description

In multiple locations of UsbDataAdvancedProtectionHook.java, there is a possible way to access USB data when the screen is off due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android 16-qpr2 —

References