CVE-2025-48636 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

In openFile of BugreportContentProvider.java, there is a possible way to read and write unauthorized files due to a path traversal error. This could lead to loc…
High CVSS: 8.4

CVE-2025-48636

In openFile of BugreportContentProvider.java, there is a possible way to read and write unauthorized files due to a path traversal error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Vendor
Google
Product
Android
CWE
CWE-22
Yayın Tarihi
2026-03-02 19:16:27
Güncelleme
2026-03-06 04:16:00
Source Identifier
security@android.com
KEV Date Added
-

Kategoriler

Referanslar