CVE-2025-48554
BaseFortify
Publication date: 2025-09-04
Last updated on: 2025-09-05
Assigner: Android (associated with Google Inc. or Open Handset Alliance)
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| android | 13.0 | |
| android | 15.0 | |
| android | 16.0 | |
| android | 14.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-693 | The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a logic error in the handlePackagesChanged function of DevicePolicyManagerService.java that can cause a persistent denial of service. It means the affected system could become unresponsive or fail to operate correctly due to this flaw. Exploiting this issue requires user interaction and does not need any additional execution privileges.
How can this vulnerability impact me? :
The vulnerability can cause a local denial of service, making the device or service unavailable or unresponsive. Since it requires user interaction and no extra privileges, it could disrupt normal operations or availability of the affected system.