cbcvebase.
CVE-2025-48625
published 2025-12-08

CVE-2025-48625: In multiple locations of UsbDataAdvancedProtectionHook.java, there is a possible way to access USB data when the screen is off due to a race condition. This…

high7CVSS 3.1
AVLACHPRLUINSUCHIHAH
In multiple locations of UsbDataAdvancedProtectionHook.java, there is a possible way to access USB data when the screen is off due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected

2 ranges
VendorProductVersion rangeFixed in
googleandroid——
googleandroid——