CVE-2025-48633 - In hasAccountsOnAnyUser of DevicePolicyManagerService.java, there is a possible way to add a Device Owner after provisioning due to a logic error in the code

Back Back to CVE browser

MEDIUM KEV

In hasAccountsOnAnyUser of DevicePolicyManagerService.java, there is a possible way to add a Device Owner after provisioning due to a logic error in the code

Published Dec 8, 2025 ·Due Dec 23, 2025

5.5

MEDIUM

CVSS 3.1

EPSS 0.26%

Description

In hasAccountsOnAnyUser of DevicePolicyManagerService.java, there is a possible way to add a Device Owner after provisioning due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

Vendor Google Product Android Default
unaffected
- Version
  13
  Status
  affected
  Constraints
  -
- Version
  14
  Status
  affected
  Constraints
  -
- Version
  15
  Status
  affected
  Constraints
  -
- Version
  16
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Google

Android

unaffected

Version	Status	Constraints
13	affected	-
14	affected	-
15	affected	-
16	affected	-

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

https://android.googlesource.com/platform/frameworks/base/+/d00bcda9f42dcf272d329e9bf9298f32af732f93
PatchProduct
https://source.android.com/security/bulletin/2025-12-01
Vendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-48633
government-resourceUS Government Resource

Link	Providers	Tags
https://android.googlesource.com/platform/frameworks/base/+/d00bcda9f42dcf272d329e9bf9298f32af732f93		PatchProduct
https://source.android.com/security/bulletin/2025-12-01		Vendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-48633		government-resourceUS Government Resource