CVE-2025-48625

Publication date

2025-12-08 17:27:55

Family

google_android

State

PUBLISHED

Description

In multiple locations of UsbDataAdvancedProtectionHook.java, there is a possible way to access USB data when the screen is off due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.