CVE-2025-48572: Android Frameworks Base Package Local Privilege Escalation Vulnerability
Summary
CVE-2025-48572: In multiple locations, there is a possible way to launch activities from the background due to a permissions bypass. Affects platform/frameworks/base across 5 version ranges.
>= 13:0, < 13:2025-12-01
>= 14:0, < 14:2025-12-01
>= 15:0, < 15:2025-12-01
>= 16:0, < 16:2025-12-01
>= 16-next:0, < 16-next:2025-12-01
Fixed in 16-next:2025-12-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Android Frameworks Base package is a core component of the Android operating system, providing essential services and APIs for application development. It facilitates communication between applications and the underlying hardware, enabling functionalities such as media playback, user interface management, and system services. This package is critical for the overall performance and security of Android devices, making any vulnerabilities within it particularly concerning.
Vulnerability Detail
The vulnerability identified as CVE-2025-48572 arises from a permissions bypass in multiple locations within the Android Frameworks Base package. This flaw allows unauthorized activities to be launched from the background, potentially leading to local escalation of privileges without requiring additional execution privileges. The exploitation of this vulnerability does not necessitate user interaction, which significantly increases its risk profile. Attackers could leverage this flaw to gain unauthorized access to sensitive system functionalities, compromising the integrity and security of the device.
How To Fix
Minimum fixed version
16-next:2025-12-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can restrict background activity for applications that utilize the affected services. This can be done by navigating to the device settings and adjusting the permissions for individual applications to limit their ability to run in the background.
Conclusion
CVE-2025-48572 represents a significant security risk within the Android Frameworks Base package, allowing for local privilege escalation without user interaction. It is crucial for users to update their systems to the patched versions to ensure their devices remain secure. Utilizing tools like Vulert can help monitor and manage vulnerabilities effectively.
See every vulnerability recorded for platform/frameworks/base →
FAQ
CVE-2025-48572 is a vulnerability in the Android Frameworks Base package that allows unauthorized activities to be launched from the background, leading to potential local privilege escalation.
You can check if your application is affected by using Vulert, which monitors and alerts in real-time for open-source vulnerabilities. Visit Vulert Scanner to use the Vulert playground without any signup.
Exploitation of this vulnerability could allow attackers to gain unauthorized access to sensitive system functionalities, potentially compromising the device's integrity and security.
No, user interaction is not required for exploitation, which increases the risk associated with this vulnerability.
Update the Android Frameworks Base package to the latest patched version as soon as possible to mitigate the risks associated with this vulnerability.
References
Related vulnerabilities
Recent vulnerabilities recorded for platform/frameworks/base.
