EUVD-2025-26819

Malicious code in bioql PyPI...

The vulnerability of the markMediaAsFavorite() function in the MediaProvider component of Android operating systems allows a hacker to escalate their privileges and execute arbitrary code.

The vulnerability of the markMediaAsFavorite function in the MediaProvider component of Android operating systems is related to the possibility of bypassing access control mechanisms. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...

CVE-2025-48532

In markMediaAsFavorite of MediaProvider.java, there is a possible way to bypass the WRITEEXTERNALSTORAGE permission due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...