{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-48561","assignerOrgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","state":"PUBLISHED","assignerShortName":"google_android","dateReserved":"2025-05-22T18:11:29.901Z","datePublished":"2025-09-04T18:34:38.810Z","dateUpdated":"2025-09-08T19:05:09.392Z"},"containers":{"cna":{"providerMetadata":{"orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","shortName":"google_android","dateUpdated":"2025-09-04T18:34:38.810Z"},"problemTypes":[{"descriptions":[{"lang":"en","description":"Information disclosure"}]}],"affected":[{"vendor":"Google","product":"Android","versions":[{"version":"16","status":"affected"},{"version":"15","status":"affected"},{"version":"14","status":"affected"},{"version":"13","status":"affected"}],"defaultStatus":"unaffected"}],"descriptions":[{"lang":"en","value":"In multiple locations, there is a possible way to access data displayed on the screen due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation."}],"references":[{"url":"https://android.googlesource.com/platform/frameworks/native/+/20465375a1d0cb71cdb891235a9f8a3fba31dbf6"},{"url":"https://source.android.com/security/bulletin/2025-09-01"}],"x_generator":{"engine":"cvelib 1.7.1"}},"adp":[{"problemTypes":[{"descriptions":[{"type":"CWE","cweId":"CWE-203","lang":"en","description":"CWE-203 Observable Discrepancy"}]}],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"timestamp":"2025-09-08T19:05:00.638063Z","id":"CVE-2025-48561","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"title":"CISA ADP Vulnrichment","providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-09-08T19:05:09.392Z"}}]}}