CVE-2025-48572
Description
In multiple locations, there is a possible way to launch activities from the background due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Summary dbcve.org
This is an Android permissions bypass vulnerability affecting multiple code locations that allows launching activities from the background without proper authorization. The flaw enables local privilege escalation without requiring additional execution privileges or user interaction.
Mitigation
Apply available Android security patches from the platform vendor; for custom implementations, review and enforce proper activity launch permissions and Intent filtering to prevent unauthorized background activity starts.