7.8
/ 10
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
In multiple locations there is a possible provisioning bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Basic Information
ID
CVE-2025-48643
Source
google_android
Published
Jun 17, 2026 at 05:53
Modified
Jun 17, 2026 at 13:51
Affected Product
Vendor
Google
Product
Android
Version
17
Affected Versions
Google Android 17