What it is
Android Pixel contains a vulnerability in the Framework component, where the UI may be misleading or insufficient, providing a means to hide a foreground service notification. This could enable a local attacker to disclose sensitive information.
What to do
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other Android entries on the list
- Framework Android Framework Integer Overflow Vulnerability CVE-2025-48595 · Jun 2, 2026
- Framework Android Framework Information Disclosure Vulnerability CVE-2025-48633 · Dec 2, 2025
- Framework Android Framework Privilege Escalation Vulnerability CVE-2025-48572 · Dec 2, 2025
- Runtime Android Runtime Use-After-Free Vulnerability CVE-2025-48543 · Sep 4, 2025
- Framework Android Framework Privilege Escalation Vulnerability CVE-2024-43093 · Nov 7, 2024
- Kernel Android Kernel Remote Code Execution Vulnerability CVE-2024-36971 · Aug 7, 2024