CVE-2025-48646

High

In executeRequest of ActivityStarter.java, there is a possible launch anywhere due to a confused deputy. This could lead to local…

google_android·CWE-441·Published 2026-03-02

CVSS

7.8

EPSS

0.00

KEV

Exploits

Vendor statements (1)

source.android.com

cve.orgen

246 chars

In executeRequest of ActivityStarter.java, there is a possible launch anywhere due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

NVDes

285 chars

En executeRequest de ActivityStarter.java, hay un posible lanzamiento en cualquier lugar debido a un diputado confuso. Esto podría llevar a una escalada local de privilegios sin necesidad de privilegios de ejecución adicionales. Se necesita interacción del usuario para la explotación.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	7.8	—	—	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
3.1	Primary	cve.org	7.8	—	—	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
3.1	Secondary	NVD	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H