CVE-2025-48633: Technical Deep-Dive (Auto Refreshed)

Generated on 2026-03-23T21:36:50.652Z. This file is automatically regenerated every 30 minutes by the CVE AI enrichment job using web sources (NVD, MITRE, CISA KEV, GitHub).

Executive Technical Summary

In hasAccountsOnAnyUser of DevicePolicyManagerService.java, there is a possible way to add a Device Owner after provisioning due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

• Context preserved from previous revision: In hasAccountsOnAnyUser of DevicePolicyManagerService.java, there is a possible way to add a Device Owner after provisioning due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Notes: "A single malicious packet can own your device." — Android Security Team, Nov 2025

Technical Details

• CVE: CVE-2025-48633
• KEV date added: 2025-12-02
• KEV due date: 2025-12-23
• NVD published: 2025-12-08
• NVD modified: 2025-12-10
• MITRE modified: 2026-02-26
• CVSS base score: 5.5
• CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
• CVSS exploitability score: 1.8
• CVSS impact score: 3.6
• Attack vector: Local
• Attack complexity: Low
• Privileges required: Low
• User interaction: None
• Scope: Unchanged
• Confidentiality impact: High
• Integrity impact: None
• Availability impact: None

Versions and Products Impacted

• google / android (versions: 13.0)
• google / android (versions: 14.0)
• google / android (versions: 15.0)
• google / android (versions: 16.0)
• Google / Android (versions: 16, 15, 14, 13)

Weakness Classification

• NVD-CWE-noinfo
• Information disclosure
• CWE-noinfo Not enough information

Repositories for Lab Validation (Public Examples)

• logesh-GIT001/CVE-2025-48593 | stars: 7 | updated: 2026-03-11 | https://github.com/logesh-GIT001/CVE-2025-48593
  Notes: "A single malicious packet can own your device." — Android Security Team, Nov 2025
• pjqwudi/my_vuln_save | stars: 0 | updated: 2025-10-26 | https://github.com/pjqwudi/my_vuln_save

People and Organizations Mentioned

• google_android
• Android
• Framework
• logesh-GIT001
• pjqwudi

Practical Defensive Validation (Authorized Only)

1. Use only isolated environments and systems you own or are explicitly authorized to test.
2. Snapshot infrastructure before validation and preserve baseline logs (EDR, SIEM, OS, app).
3. Classify sensitive fields in google / android (versions: 13.0) and verify logs/responses do not leak secrets.
4. Test redaction and response-minimization controls in debug and production-like modes.
5. Monitor bulk export behavior and abnormal low-privilege read spikes.

References

• NVD record: https://nvd.nist.gov/vuln/detail/CVE-2025-48633
• MITRE CVE record: https://www.cve.org/CVERecord?id=CVE-2025-48633
• CISA KEV Catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• CISA KEV JSON feed: https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json
• KEV notes: https://source.android.com/docs/security/bulletin/2025-12-01 ; https://nvd.nist.gov/vuln/detail/CVE-2025-48633
• https://android.googlesource.com/platform/frameworks/base/+/d00bcda9f42dcf272d329e9bf9298f32af732f93
• https://source.android.com/security/bulletin/2025-12-01
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-48633
• Repository example: https://github.com/logesh-GIT001/CVE-2025-48593
• Repository example: https://github.com/pjqwudi/my_vuln_save

This content is for defensive security training and authorized validation only.