High severity7.8NVD Advisory· Published Sep 4, 2025· Updated Jun 17, 2026

CVE-2025-48549

Description

In multiple locations, there is a possible way to record audio via a background app due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Google/Android5 versions
cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*
- cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*
- cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: 15

Patches

Vulnerability mechanics

References

android.googlesource.com/platform/frameworks/av/+/37e7f808fad105da187b021fb762a66d37c9212anvdPatch
android.googlesource.com/platform/frameworks/av/+/8c09eb1034cb3b02a66f6c241c0b9c9981998d6fnvdPatch
android.googlesource.com/platform/frameworks/base/+/00344da68fce6ec4f7a1bf36f0ea3797805f00cenvdPatch
android.googlesource.com/platform/frameworks/base/+/20e363e2225843ff3cc7d6bea05ae2f4db83b408nvdPatch
android.googlesource.com/platform/frameworks/base/+/acbd37d21c2feffb6d64e669b956d59a6062b751nvdPatch
source.android.com/security/bulletin/2025-09-01nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000