CVE-2025-48558

Description

In multiple functions of BatteryService.java, there is a possible way to hijack implicit intent intended for system app due to Implicit intent hijacking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVSS v3.1 Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness Type (CWE)

CWE-927 CWE-927

Affected Products

Vendor	Product	Versions
google	android	All
google	android	All
google	android	All
google	android	All

References

Advisories & Patches

https://android.googlesource.com/platform/frameworks/base/+/0d30c78c8953adfc969a8dba8a58a8ea3571908c https://source.android.com/security/bulletin/2025-09-01

Frequently Asked Questions

What is CVE-2025-48558? +

In multiple functions of BatteryService.java, there is a possible way to hijack implicit intent intended for system app due to Implicit intent hijacking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. It has a CVSS v3.1 base score of 7.8 (HIGH).

How severe is CVE-2025-48558? +

CVE-2025-48558 has a CVSS v3.1 score of 7.8 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching.

What products are affected by CVE-2025-48558? +

CVE-2025-48558 affects products from google, specifically: android. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2025-48558? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2023-47889 7.8

The Android application BINHDRM26 com.bdrm.superreboot 1.0.3, exposes several critical actions through its exported broadcast receivers. These exposed actions can allow …

CVE-2024-3108 5.5

An implicit intent vulnerability was reported for Motorola’s Time Weather Widget application that could allow a local application to acquire …

CVE-2023-41826 5.1

A PendingIntent hijacking vulnerability in Motorola Device Help (Genie) application that could allow local attackers to access files or interact …

CVE-2023-41820 5.0

An implicit intent vulnerability was reported in the Motorola Ready For application that could allow a local attacker to read …

CVE-2023-41828 4.4

An implicit intent export vulnerability was reported in the Motorola Phone application, that could allow unauthorized access to a non-exported …

CVE-2023-41817 2.8

An improper export vulnerability was reported in the Motorola Phone Calls application that could allow a local attacker to read …