CVE-2025-48654

creationtimestamp| type| source ---|---|--- 2026-03-03 15:46:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mg64ibabw72c...

CVE-2025-48654

In onStart of CompanionDeviceManagerService.java, there is a possible confused deputy due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48654

CVE-2025-48654 concerns the Android CompanionDeviceManagerService.java, where a logic error in onStart can cause a confused deputy leading to local elevation of privilege. Exploitation does not require user interaction. Affected component: CompanionDeviceManagerService (Android). Reported impact:...