CVE-2025-48618

CVE-2025-48618 is an Android framework elevation-of-privilege vulnerability. In CommandParamsFactory.java, processLaunchBrowser could allow a browser interaction from the lockscreen due to improper locking, enabling physical escalation of privilege without user interaction. Impact is described as...

CVE-2025-48618: Improper Locking

In processLaunchBrowser of CommandParamsFactory.java, there is a possible browser interaction from the lockscreen due to improper locking. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2025-43495

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A flaw exists in the Framework component of Android operating systems due to insufficient input validation. This could allow an attacker to escalate privileges. Specifically, the issue reside...