CVE-2025-48561

Trung bình 5.5 CWE-203 Công bố 02:15 05/09/2025

In multiple locations, there is a possible way to access data displayed on the screen due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Tham khảo

https://android.googlesource.com/platform/frameworks/native/+/20465375a1d0cb71cdb891235a9f8a3fba31dbf6
https://source.android.com/security/bulletin/2025-09-01

Xem trên NVD ↗

PoC (1)

⚠ Chưa kiểm duyệt. Chỉ chạy trong máy ảo.

Ife-cyb/CYB-401-Pixnapping-CVE-2025-48561
★ 021 giờ trước

CYB-401 vulnerability report: Pixnapping (CVE-2025-48561), NVD assessment, CVSS rating, patch analysis and mitigations.