CVE-2025-48560

Medium

In AndroidManifest.xml, there is a possible way for an app to monitor motion events due to a confused deputy. This could lead to local…

google_android·CWE-441·Published 2025-09-04

CVSS

5.5

EPSS

0.00

KEV

Exploits

cve.orgen

254 chars

In AndroidManifest.xml, there is a possible way for an app to monitor motion events due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

NVDen

254 chars

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	5.5	—	—	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
3.1	Primary	cve.org	5.5	—	—	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N