NetSight
IP …
medium5.5

CVE-2025-48538

In setApplicationHiddenSettingAsUser of PackageManagerService.java, there is a possible way to hide a system critical package due to improper input validation.

Impact

In setApplicationHiddenSettingAsUser of PackageManagerService.java, there is a possible way to hide a system critical package due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffected versions
GoogleAndroid
Versions 13.0, 14.0, 15.0, 16.0

Weakness classification

CWE-20

References