CVE-2025-48582 - Vulnerability Analysis

Overview

An unspecified product contains a local privilege escalation caused by intent redirect allowing media deletion without MANAGE_EXTERNAL_STORAGE permission, letting local attackers escalate privileges without user interaction.

Severity & Score

Impact

Local attackers can delete media and escalate privileges without needing additional execution rights or user interaction.

Mitigation

Update to the latest version or apply vendor patches addressing intent redirect and permission checks.

References

• https://source.android.com/security/bulletin/2026-03-01

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 3, 2026

🟠 CVE-2025-48582 - High (8.4) In multiple locations, there is a possible way to delete media without the MANAGE_EXTERNAL_STORAGE permission due to an intent redirect. This could lead to local escalation of privilege with no additional execution privileges needed. User interact... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-48582/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner