CVE-2025-48619

CVE-2025-48619 affects Android’s ContentProvider.java (ContentProvider) where a logic error can let an app with read-only access truncate files, causing local elevation of privilege without extra privileges or user interaction. Public sources (NVD/NVDCNVD) describe the issue and note Android secu...