CVE-2025-48651

published 2026-04-06

CVE-2025-48651: In importWrappedKey of KMKeymasterApplet.java, there is a possible way access keys that should be restricted due to improper input validation. This could lead…

medium 5.5 CVSS 3.1

AV L AC L PR L UI N S U C H I N A N

In importWrappedKey of KMKeymasterApplet.java, there is a possible way access keys that should be restricted due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
google	android	—	—

CWE-20