CVE Catalog

CVE-2025-48616

LowCVSS 3.3
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.07%

0th percentile - higher than 0% of all known CVEs

Summary

A logic error in KeyguardViewMediator.java allows bypassing lockdown mode via screen pinning. This could lead to local information disclosure without additional privileges or user interaction.

Risk Assessment

An attacker with physical access to the device could bypass the lock screen and access sensitive data.

Recommendation

Install the Android system update that fixes this logic error.

Original NVD description (English source)

In multiple functions of KeyguardViewMediator.java , there is a possible way to bypass lockdown mode with screen pinning due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS