CVE-2025-48561

MEDIUM 5.5EPSS 0.1%

In multiple locations, there is a possible way to access data displayed on the screen due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CVSS v3.1: 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v3.1: 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS: 0.12% chance of exploitation in the next 30 days, 2th percentile
Published: 2025-09-04
Updated: 2025-09-08

Proof-of-concept exploits (1)

demining/Pixnapping-Attack-on-Android

References

Related