← Back

CVE-2025-48642

nvd nist
Published: Mar 2, 2026Modified: Jun 17, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

In jump_to_payload of payload.rs, there is a possible information disclosure due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected (6)

Products: Google: Android
Google
1 product
Android
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Google
Android
Version 14.0
Android
Version 15.0
Android
Version 16.0
Android
Version 16.0 qpr2_beta_1
Android
Version 16.0 qpr2_beta_2
Android
Version 16.0 qpr2_beta_3

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (1)

Source: security@android.com

Timeline

No history available yet.