CVE-2025-48590

I

n verifyAndGetBypass of AppOpsService.java, there is a possible method for a malicious app to prevent dialing emergency services under limited circumstances due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Configurations

Configuration 1 (hide)

OR cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:16.0:-:*:*:*:*:*:*

History

10 Dec 2025, 19:44

Type Values Removed Values Added
New CVE

Information

Published : 2025-12-08 17:16

Updated : 2025-12-10 19:44


NVD link : CVE-2025-48590

Mitre link : CVE-2025-48590

CVE.ORG link : CVE-2025-48590


JSON object : View

Products Affected
CWE
CWE-400

Uncontrolled Resource Consumption