CVE-2025-48582
Awaiting Analysis Awaiting Analysis - Queue

Intent Redirect Allows Media Deletion Without Permission in Android

Publication date: 2026-03-02

Last updated on: 2026-03-06

Assigner: Android (associated with Google Inc. or Open Handset Alliance)

Description
In multiple locations, there is a possible way to delete media without the MANAGE_EXTERNAL_STORAGE permission due to an intent redirect. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-03-02
Last Modified
2026-03-06
Generated
2026-07-06
AI Q&A
2026-03-02
EPSS Evaluated
2026-07-05
NVD
CVE-2025-48582

Affected Vendors & Products

Showing 6 associated CPEs
Vendor Product Version / Range
google android 14.0
google android 15.0
google android 16.0
google android 16.0
google android 16.0
google android 16.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-59 The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves a flaw in multiple locations where media can be deleted without requiring the MANAGE_EXTERNAL_STORAGE permission. This happens due to an intent redirect, which allows an attacker to escalate privileges locally without needing any additional execution privileges or user interaction.

Impact Analysis

The vulnerability can lead to local escalation of privilege, meaning an attacker could delete media files on the device without proper authorization. Since no user interaction or additional execution privileges are needed, this could allow unauthorized modification or deletion of media content, potentially causing data loss or disruption.

Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

I don't know

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-48582. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart