CVE-2025-48542

In multiple functions of AccountManagerService.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:16.0:*:*:*:*:*:*:*

History

05 Sep 2025, 19:04

Type Values Removed Values Added
CPE cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:16.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*
References () https://android.googlesource.com/platform/frameworks/base/+/7ed50e5b5d568bc8be5d3603991aa9add67a7f44 - () https://android.googlesource.com/platform/frameworks/base/+/7ed50e5b5d568bc8be5d3603991aa9add67a7f44 - Patch
References () https://source.android.com/security/bulletin/2025-09-01 - () https://source.android.com/security/bulletin/2025-09-01 - Vendor Advisory
First Time Google
Google android

04 Sep 2025, 20:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.5
CWE CWE-400

04 Sep 2025, 19:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-09-04 19:15

Updated : 2025-09-05 19:04


NVD link : CVE-2025-48542

Mitre link : CVE-2025-48542

CVE.ORG link : CVE-2025-48542


JSON object : View

Products Affected

google

  • android
CWE
CWE-400

Uncontrolled Resource Consumption