CVE-2025-48579

In multiple functions of MediaProvider.java, there is a possible external storage write permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

In multiple functions of MediaProvider.java, there is a possible external storage write permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

En múltiples funciones de MediaProvider.java, existe una posible elusión de permiso de escritura en almacenamiento externo debido a un delegado confuso. Esto podría conducir a una escalada local de privilegios sin privilegios de ejecución adicionales necesarios. No se necesita interacción del usuario para la explotación.