CVE-2025-48582 - Vulnerability Analysis

Overview

An unspecified product contains a local privilege escalation caused by intent redirect allowing media deletion without MANAGE_EXTERNAL_STORAGE permission, letting local attackers escalate privileges without user interaction.

Severity & Score

Impact

Local attackers can delete media and escalate privileges without needing additional execution rights or user interaction.

Mitigation

Update to the latest version or apply vendor patches addressing intent redirect and permission checks.

References

• https://source.android.com/security/bulletin/2026-03-01

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner