CVE-2025-48576: Android Frameworks Base Denial of Service Vulnerability
Summary
CVE-2025-48576: In updateNotificationChannelGroupFromPrivilegedListener of NotificationManagerService.java, there is a possible permanent denial of service due to resource exhaustion. Affects platform/frameworks/base across 5 version ranges.
>= 13:0, < 13:2025-12-01
>= 14:0, < 14:2025-12-01
>= 15:0, < 15:2025-12-01
>= 16:0, < 16:2025-12-01
>= 16-qpr2-next:0, < 16-qpr2-next:2025-12-01
Fixed in 16-qpr2-next:2025-12-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Android Frameworks Base package is a core component of the Android operating system, providing essential services and APIs for application development. It manages notifications, system interactions, and user interfaces, making it a critical part of the Android ecosystem. This package is widely used across various Android devices, and its security is paramount to ensure a stable and secure user experience.
Vulnerability Detail
The vulnerability identified as CVE-2025-48576 exists in the 'updateNotificationChannelGroupFromPrivilegedListener' function of NotificationManagerService.java. It allows for a potential permanent denial of service due to resource exhaustion. This vulnerability can be exploited locally without requiring additional execution privileges or user interaction, leading to a situation where the notification service becomes unresponsive, impacting the overall functionality of the device.
How To Fix
Minimum fixed version
16-qpr2-next:2025-12-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. Users are advised to apply the patch as soon as it becomes available to prevent potential exploitation.
Conclusion
CVE-2025-48576 is a critical vulnerability in the Android Frameworks Base package that poses a risk of denial of service. It is essential for users and developers to stay informed about this vulnerability and apply the necessary updates to ensure the security and functionality of their devices.
See every vulnerability recorded for platform/frameworks/base →
FAQ
CVE-2025-48576 is a vulnerability in the Android Frameworks Base package that can lead to a denial of service due to resource exhaustion.
Exploitation of this vulnerability can cause the notification service to become unresponsive, affecting the overall functionality of your device.
No, user interaction is not needed for exploitation, making it a significant risk.
You can use Vulert to monitor and alert in real-time for open-source vulnerabilities in your software. Check your application against this vulnerability using the Vulert playground at Vulert Scanner.
If your application is affected, update the Android Frameworks Base package to the patched version as soon as possible.
References
Related vulnerabilities
Recent vulnerabilities recorded for platform/frameworks/base.
