CVE-2025-48609 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

In multiple functions of MmsProvider.java, there is a possible way to arbitrarily delete files which affect telephony, SMS, and MMS functionalities due to a pat…
Critical CVSS: 9.1

CVE-2025-48609

In multiple functions of MmsProvider.java, there is a possible way to arbitrarily delete files which affect telephony, SMS, and MMS functionalities due to a path traversal error. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
Vendor
Google
Product
Android
CWE
CWE-400
Yayın Tarihi
2026-03-02 19:16:27
Güncelleme
2026-03-06 04:15:58
Source Identifier
security@android.com
KEV Date Added
-

Kategoriler

Referanslar