CVE-2025-48559

MediumCVSS 5.5

Published: 04/09/2025(UTC)Updated: 30/09/2026(UTC)Translated: 01/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.09%

0th percentile - higher than 0% of all known CVEs

Summary

In multiple functions of AppOpsService.java, there is a possible add a large amount of app ops due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Risk Assessment

The risk is that a local denial of service could be triggered, potentially disrupting system or application functionality.

Recommendation

Fix input validation in AppOpsService and limit the number of operations.

Other vulnerabilities in AppOpsService

CVE-2026-0014Medium
In isPackageNullOrSystem of AppOpsService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS