CVE-2025-48525

In disassociate of DisassociationProcessor.java, there is a possible way for an app to continue reading notifications when not associated to a companion device due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

• CWE-20

• https://android.googlesource.com/platform/frameworks/base/+/31989869759e9b6119dc1cf324c395d789024908Patch, Product
• https://android.googlesource.com/platform/frameworks/base/+/5ec1cdae1805dec292a2de5554896363eaa078ebPatch, Product
• https://source.android.com/security/bulletin/2025-12-01Vendor Advisory

Published

Dec 8, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-4852A vulnerability, which was classified as problematic, has be…3.4
• CVE-2025-48520An improper input validation vulnerability within the AMD Pl…6.9
• CVE-2025-48521Improper input validation in the AMD Secure Processor (ASP) …6.9
• CVE-2025-48522In setDisplayName of AssociationRequest.java, there is a pos…7.8
• CVE-2025-48523In onCreate of SelectAccountActivity.java, there is a possib…7.8
• CVE-2025-48524In isSystem of WifiPermissionsUtil.java, there is a possible…5.5
• CVE-2025-48526In createMultiProfilePagerAdapter of ChooserActivity.java , …4
• CVE-2025-48527In multiple locations, there is a possible way to leak hidde…6.2
• CVE-2025-48528In multiple locations, there is a possible way to overlay bi…4
• CVE-2025-48529In setRingtoneUri of VoicemailNotificationSettingsUtil.java …5.5
• CVE-2025-48530In multiple locations, there is a possible condition that re…8.1
• CVE-2025-48531In getCallingPackageName of CredentialStorage, there is a po…7.8