ReportizFlow
In multiple locations there is a possible provisioning bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
|
No data.
No data.
References
| Link | Providers |
|---|---|
| https://source.android.com/docs/security/bulletin/android-17 |
|
History
Thu, 18 Jun 2026 22:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Android Provisioning Bypass for Local Privilege Escalation |
Thu, 18 Jun 2026 20:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Android Provisioning Bypass Permits Local Privilege Escalation | |
| Weaknesses | CWE-269 |
Thu, 18 Jun 2026 16:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
cvssV3_1
|
Thu, 18 Jun 2026 04:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Android Provisioning Bypass Permits Local Privilege Escalation | |
| Weaknesses | CWE-20 CWE-269 |
Wed, 17 Jun 2026 07:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Google
Google android |
|
| Vendors & Products |
Google
Google android |
Wed, 17 Jun 2026 06:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | In multiple locations there is a possible provisioning bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | |
| References |
|
MITRE
Status: PUBLISHED
Assigner: google_android
Published: 2026-06-17T05:53:46.463Z
Updated: 2026-06-18T03:55:49.881Z
Reserved: 2025-05-22T18:12:46.994Z
Link: CVE-2025-48643
Vulnrichment
Updated: 2026-06-17T13:51:50.273Z
NVD
No data.
Redhat
No data.