CVE-2025-48536

CVE-2025-48536 identifies a confused deputy vulnerability in the grantAllowlistedPackagePermissions function of SettingsSliceProvider.java within the Google Android Framework . A third-party application can exploit this flaw to modify secure settings , leading to a local escalation of privilege w...