CoreCVE
Back

HIGH

In validateIconUserBoundary of PrintManagerService.java, there is a possible cross-user image leak due to a confused deputy

Published Dec 8, 2025

Description

In validateIconUserBoundary of PrintManagerService.java, there is a possible cross-user image leak due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-441

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner google_android
Published Dec 8, 2025
Updated Feb 26, 2026
Reserved May 22, 2025
Link CVE-2025-48628
CISA Vulnrichment
Updated Dec 9, 2025
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2025-48628
Red Hat
Severity n/a
Public date n/a
Links CVE-2025-48628