CVE-2025-486514.0Medium
Google Android vulnerability
Google · Android
Not in CISA KEV
0.1%probability of exploitation in the next 30 days
0th percentile
050100
Higher than 0% of scored CVEs
4.0MediumCVSS
LowMediumHighCrit.
DescriptionNVD
In importWrappedKey of KMKeymasterApplet.java, there is a possible way access keys that should be restricted due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Coverage1 article · 1 outlet
First in our coverage: SecurityWeek, 7 Apr.
- Android patches critical DoS flaw and StrongBox keystore vulnerabilitySecurityWeek · first in our coverage · mentions it in passing
New articles also arrive in the RSS feed.