In loadDescription of DeviceAdminInfo.java, there is a possible persistent package due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Metrics
Affected Vendors & Products
References
| Link | Providers |
|---|---|
| https://source.android.com/security/bulletin/2026-03-01 |
|
History
Mon, 02 Mar 2026 19:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | In loadDescription of DeviceAdminInfo.java, there is a possible persistent package due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | |
| References |
|
Status: PUBLISHED
Assigner: google_android
Published:
Updated: 2026-03-02T18:42:25.869Z
Reserved: 2025-05-22T18:12:46.994Z
Link: CVE-2025-48645
No data.
Status : Awaiting Analysis
Published: 2026-03-02T19:16:28.320
Modified: 2026-03-02T20:29:29.330
Link: CVE-2025-48645
No data.
OpenCVE Enrichment
No data.