cbcvebase.
CVE-2025-48566
published 2025-12-08

CVE-2025-48566: In multiple locations, there is a possible bypass of user profile boundary with a forwarded intent due to improper input validation. This could lead to local…

high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
In multiple locations, there is a possible bypass of user profile boundary with a forwarded intent due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected

8 ranges
VendorProductVersion rangeFixed in
googleandroid——
googleandroid——
googleandroid——
googleandroid——
googleandroid——
googleandroid——
googleandroid——
googleandroid——