CVE-2025-48561

Published Sep 4, 2025

Last updated a month ago

Android

Pixnapping

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-48561, also known as "Pixnapping," is a vulnerability affecting Android devices. It allows a malicious application to steal sensitive on-screen information, such as two-factor authentication codes, private messages, and financial data, from other apps or websites. This is achieved by exploiting Android APIs and a hardware side channel related to how graphics hardware processes visual data. The attack involves forcing content from a "victim" app into the rendering path using Android intents, then stacking semi-transparent activities and triggering visual effects to leak information about each pixel's value. By repeating this process, a malicious app can reconstruct what's on the screen, potentially stealing 2FA codes in under 30 seconds. Google has released mitigations in the September 2025 Android Security Bulletin.

Description: In multiple locations, there is a possible way to access data displayed on the screen due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Source: security@android.com
NVD status: Analyzed
Products: android

Risk scores

CVSS 3.1

Type: Primary
Base score: 5.5
Impact score: 3.6
Exploitability score: 1.8
Vector string: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Severity: MEDIUM

Weaknesses

nvd@nist.gov: CWE-203
134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-203

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "879FFD0C-9B38-4CAA-B057-1086D794D469"
          },
          {
            "criteria": "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2700BCC5-634D-4EC6-AB67-5B678D5F951D"
          },
          {
            "criteria": "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
          },
          {
            "criteria": "cpe:2.3:o:google:android:16.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2D49E611-5D53-479D-A981-42388FDC0E8D"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.