- Description
- In processLaunchBrowser of CommandParamsFactory.java, there is a possible browser interaction from the lockscreen due to improper locking. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- Source
- security@android.com
- NVD status
- Modified
- Products
- android
CVSS 3.1
- Type
- Primary
- Base score
- 6.8
- Impact score
- 5.9
- Exploitability score
- 0.9
- Vector string
- CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity
- MEDIUM
- Hype score
- Not currently trending
University of Birmingham researchers reveal SIM cards can issue modem commands phones cannot block, with CVE-2025-48618 patched but the underlying RUN AT channel still live across millions of devices. Key findings: - The CATana toolkit fuzzes the Proactive SIM interface (3GPP h
@DFIR_Radar
26 Aug 2026
163 Impressions
0 Retweets
0 Likes
0 Bookmarks
1 Reply
0 Quotes
Researchers at the University of Birmingham found that malicious SIM cards can exploit modem vulnerabilities to potentially control some phones and IoT devices. The issues include CVE-2025-48618, CVE-2026-57550, and CVD-2026-0122. š Full Report ā University of Birmingham ht
@Mindset28138268
11 Aug 2026
2 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
[
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",
"matchCriteriaId": "879FFD0C-9B38-4CAA-B057-1086D794D469",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2700BCC5-634D-4EC6-AB67-5B678D5F951D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
"matchCriteriaId": "8538774C-906D-4B03-A3E7-FA7A55E0DA9E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:google:android:16.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2D49E611-5D53-479D-A981-42388FDC0E8D",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
]