CVE-2025-48534
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-09-04

Last updated on: 2025-09-05

Assigner: Android (associated with Google Inc. or Open Handset Alliance)

Description
In getDefaultCBRPackageName of CellBroadcastHandler.java, there is a possible escalation of privilege due to a logic error in the code. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-09-04
Last Modified
2025-09-05
Generated
2026-06-16
AI Q&A
2025-09-04
EPSS Evaluated
2026-06-15
NVD
CVE-2025-48534
Affected Vendors & Products
Showing 3 associated CPEs
Vendor Product Version / Range
google android 13.0
google android 14.0
google android 15.0
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-693 The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability is a logic error in the getDefaultCBRPackageName function of CellBroadcastHandler.java that can lead to an escalation of privilege. It allows an attacker to cause a local denial of service with system-level execution privileges without requiring any user interaction.

Impact Analysis

The vulnerability can impact you by allowing an attacker to escalate their privileges locally and cause a denial of service on the affected system, potentially disrupting normal operations with system-level access.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-48534. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart