CVE-2025-48626

CRITICAL

Google Android Background Application Launch - Privilege Escalation

Title source: llm

Description

In multiple locations, there is a possible way to launch an application from the background due to a precondition check failure. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References (3)

Scores

CVSS v3 9.8
EPSS 0.0041
EPSS Percentile 61.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Classification

CWE
CWE-693
Status published

Affected Products (4)

google/android
google/android
google/android
google/android

Timeline

Published Dec 08, 2025
Tracked Since Feb 18, 2026