CoreCVE
Back

CRITICAL

In loadDescription of DeviceAdminInfo.java, there is a possible persistent package due to improper input validation

Published Mar 2, 2026

Description

In loadDescription of DeviceAdminInfo.java, there is a possible persistent package due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-269

Improper Privilege Management

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner google_android
Published Mar 2, 2026
Updated Apr 21, 2026
Reserved May 22, 2025
Link CVE-2025-48645
CISA Vulnrichment
Updated Mar 3, 2026
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2025-48645
Red Hat
Severity n/a
Public date n/a
Links CVE-2025-48645