CVE Vulnerabilities

CVE-2025-48594

Published: Dec 08, 2025 | Modified: Dec 08, 2025
CVSS 3.x
7.3
HIGH
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

In onUidImportance of DisassociationProcessor.java, there is a possible way to retain companion application privileges after disassociation due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

Affected Software

Name Vendor Start Version End Version
Android Google 14.0 (including) 14.0 (including)
Android Google 15.0 (including) 15.0 (including)
Android Google 16.0 (including) 16.0 (including)

References