Skip to content
OpenAdvisories
High · 8.4 CVE-2025-48636 EUVD-2025-208215GHSA-fvxj-j7ff-jw68

In openFile of BugreportContentProvider.java, there is a possible way to read and write unauthorized files due to a path traversal error. T…

Published Mar 2, 2026 · Updated Mar 6, 2026 · Assigned by google_android

Description

In openFile of BugreportContentProvider.java, there is a possible way to read and write unauthorized files due to a path traversal error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android 16 —

References