CVE-2025-48628CWE-441

CVE-2025-48628

High · published December 8, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
0.2
In the wild
Unconfirmed
What it is

⚡ A local privilege escalation is lurking in the PrintManagerService.java! This sneaky vulnerability can leak images across user boundaries without a single click from the user. 🔥 Think of it like a hotel where the staff accidentally hands the wrong room key to a guest, allowing them access to someone else's private suite. Just like that, this flaw lets one user peek into another’s files, creating a recipe for chaos! An attacker could potentially exploit this vulnerability to access other users' images on the same device without needing any special permissions or user interaction. This could lead to unauthorized viewing of sensitive or personal data, making it a serious concern for privacy and security.

Put simply

Think of it like a hotel where the staff accidentally hands the wrong room key to a guest, allowing them access to someone else's private suite. Just like that, this flaw lets one user peek into another’s files, creating a recipe for chaos! This issue arises from the validateIconUserBoundary method in PrintManagerService.java, where improper checks allow cross-user image access due to a 'confused deputy' scenario. Essentially, it mishandles permissions, enabling unintended data access between different users.

What to do

An attacker could potentially exploit this vulnerability to access other users' images on the same device without needing any special permissions or user interaction. This could lead to unauthorized viewing of sensitive or personal data, making it a serious concern for privacy and security. Update to the patched version as soon as it’s released. Additionally, review user permissions and consider implementing stricter access controls to prevent similar leaks in the future. Regular security audits can also help catch such vulnerabilities early! You've got this! Stay vigilant and proactive, and you'll keep your systems secure. 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00082 · 0.2th percentile
Weakness
CWE-441 · Unintended Proxy or Intermediary ('Confused Deputy')
Published
2025-12-08T22:16Z
Affected products (4)
ProductVersionsFixed in
google/androidall versions—
google/androidall versions—
google/androidall versions—
google/androidall versions—
References (2)
EPSS history
Timeline
  • 08 DEC 16:57Z
    In validateIconUserBoundary of PrintManagerService.java, there is a possible cross-user image leak due to a confused deputy
    cvelistv5