cve/2025/CVE-2025-48545.md
2025-09-29 21:09:30 +02:00

1.0 KiB

CVE-2025-48545

Description

In isSystemUid of AccountManagerService.java, there is a possible way for an app to access privileged APIs due to a confused deputy. This could lead to local privilege escalation with no additional execution privileges needed. User interaction is not needed for exploitation.

POC

Reference

No PoCs from references.

Github