CVE-2025-48573

In sendCommand of MediaSessionRecord.java, there is a possible way to launch the foreground service while the app is in the background due to FGS while-in-use abuse. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2025-48573

A security vulnerability exists in the Android Framework component (specifically within MediaSessionRecord.java) where an attacker can abuse FGS while-in-use to launch a foreground service while the application is in the background. This flaw allows for local escalation of privilege without requi...