CVE-2025-48526 — Incorrect Privilege Assignment in Frameworks Base

CWE-266 — Incorrect Privilege Assignment5 documents5 sources
Severity
4.0MEDIUMNVD
EPSS
0.0%
top 99.62%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Platform Frameworks BasePlatform Packages Modules IntentresolverGoogle Android
Timeline
PublishedSep 4

Description

In createMultiProfilePagerAdapter of ChooserActivity.java , there is a possible way for an app to launch the ChooserActivity in another profile due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 2.5 | Impact: 1.4

Affected Packages4 packages

▶Androidplatform/frameworks_base13:0 — 13:2025-09-01
▶Androidplatform/packages_modules_intentresolver16-next:0 — 16-next:2025-09-01+3
▶CVEListV5google/android4 versions+3
▶NVDgoogle/android4 versions+3

Patches

Patch: android.googlesource.com ↗

🔴Vulnerability Details

3
CVEList
CVE-2025-48526: In createMultiProfilePagerAdapter of ChooserActivity↗2025-09-04
▶
GHSA
GHSA-jrgq-7f9r-3mm2: In createMultiProfilePagerAdapter of ChooserActivity↗2025-09-04
▶
OSV
CVE-2025-48526: In createMultiProfilePagerAdapter of ChooserActivity↗2025-09-01
▶

📋Vendor Advisories

1
Android
CVE-2025-48526: Android Security Bulletin 2025-09-01 CVE: CVE-2025-48526 Severity: HIGH Type: EoP Affected AOSP versions: 13, 14, 15, 16 References: A-407764858↗2025-09-01
▶
CVE-2025-48526 — Incorrect Privilege Assignment | cvebase