{"id":"ASB-A-399885815","details":"In isSystem of WifiPermissionsUtil.java, there is a possible permission bypass due to a missing permission check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-399885815","CVE-2025-48524"],"modified":"2026-09-21T16:00:45.521740994Z","published":"2025-09-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2025-09-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/modules/Wifi/+/c47809aec03172f8fa097b61b2130e727cb48618"}],"affected":[{"package":{"name":"platform/packages/modules/Wifi","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-next:0"},{"fixed":"16-next:2025-09-01"}]}],"versions":["16-next"],"ecosystem_specific":{"vanir_signatures":[{"source":"https://android.googlesource.com/platform/packages/modules/Wifi/+/b8feb0cc861f6071e3d3e5e289ce969237901722","target":{"file":"service/java/com/android/server/wifi/util/WifiPermissionsUtil.java"},"deprecated":false,"digest":{"line_hashes":["18641855262210758223561829005807715767","154401289206969666821398410290330701974","36589841541506230703971433069047964922","252493828614876853066203660764707020861"],"threshold":0.9},"id":"ASB-A-399885815-106be1b7","signature_type":"Line","signature_version":"v1"},{"id":"ASB-A-399885815-4f5f234c","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Wifi/+/b8feb0cc861f6071e3d3e5e289ce969237901722","target":{"function":"isSystem","file":"service/java/com/android/server/wifi/util/WifiPermissionsUtil.java"},"deprecated":false,"digest":{"length":357,"function_hash":"30939875276682431282827196200442461147"}}],"fixes":["https://android.googlesource.com/platform/packages/modules/Wifi/+/b8feb0cc861f6071e3d3e5e289ce969237901722"],"severity":"High","spl":"2025-09-01","types":["DoS"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-399885815.json"}},{"package":{"name":"platform/packages/modules/Wifi","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2025-09-01"}]}],"versions":["15"],"ecosystem_specific":{"spl":"2025-09-01","types":["DoS"],"vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"30939875276682431282827196200442461147","length":357},"id":"ASB-A-399885815-269a7750","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Wifi/+/9791ab749d18dabea583e58ca7bdcc04d22555ac","target":{"function":"isSystem","file":"service/java/com/android/server/wifi/util/WifiPermissionsUtil.java"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Wifi/+/9791ab749d18dabea583e58ca7bdcc04d22555ac","target":{"file":"service/java/com/android/server/wifi/util/WifiPermissionsUtil.java"},"deprecated":false,"digest":{"line_hashes":["18641855262210758223561829005807715767","154401289206969666821398410290330701974","36589841541506230703971433069047964922","252493828614876853066203660764707020861"],"threshold":0.9},"id":"ASB-A-399885815-c06ab385","signature_type":"Line"}],"fixes":["https://android.googlesource.com/platform/packages/modules/Wifi/+/9791ab749d18dabea583e58ca7bdcc04d22555ac"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-399885815.json"}},{"package":{"name":"platform/packages/modules/Wifi","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2025-09-01"}]}],"versions":["16"],"ecosystem_specific":{"vanir_signatures":[{"digest":{"length":357,"function_hash":"30939875276682431282827196200442461147"},"id":"ASB-A-399885815-7d283e0d","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Wifi/+/68262dc34af9552903193b352592d4c6c08d00cf","target":{"file":"service/java/com/android/server/wifi/util/WifiPermissionsUtil.java","function":"isSystem"},"deprecated":false},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Wifi/+/68262dc34af9552903193b352592d4c6c08d00cf","target":{"file":"service/java/com/android/server/wifi/util/WifiPermissionsUtil.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["18641855262210758223561829005807715767","154401289206969666821398410290330701974","36589841541506230703971433069047964922","252493828614876853066203660764707020861"]},"id":"ASB-A-399885815-c97e3364","signature_type":"Line"}],"fixes":["https://android.googlesource.com/platform/packages/modules/Wifi/+/68262dc34af9552903193b352592d4c6c08d00cf"],"severity":"High","spl":"2025-09-01","types":["DoS"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-399885815.json"}},{"package":{"name":"platform/packages/modules/Wifi","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2025-09-01"}]}],"versions":["13"],"ecosystem_specific":{"types":["DoS"],"vanir_signatures":[{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Wifi/+/b0f0d75f85fbf5fdfc63b47dd031e0c4a346c3f3","target":{"file":"service/java/com/android/server/wifi/util/WifiPermissionsUtil.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["18641855262210758223561829005807715767","154401289206969666821398410290330701974","36589841541506230703971433069047964922","252493828614876853066203660764707020861"]},"id":"ASB-A-399885815-adb40934"},{"id":"ASB-A-399885815-e3881bdf","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Wifi/+/b0f0d75f85fbf5fdfc63b47dd031e0c4a346c3f3","target":{"file":"service/java/com/android/server/wifi/util/WifiPermissionsUtil.java","function":"isSystem"},"deprecated":false,"digest":{"length":357,"function_hash":"30939875276682431282827196200442461147"}}],"fixes":["https://android.googlesource.com/platform/packages/modules/Wifi/+/b0f0d75f85fbf5fdfc63b47dd031e0c4a346c3f3"],"severity":"High","spl":"2025-09-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-399885815.json"}},{"package":{"name":"platform/packages/modules/Wifi","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2025-09-01"}]}],"versions":["14"],"ecosystem_specific":{"vanir_signatures":[{"source":"https://android.googlesource.com/platform/packages/modules/Wifi/+/7b7af167d8025ea3e80f60f24c701b951b7133dd","target":{"file":"service/java/com/android/server/wifi/util/WifiPermissionsUtil.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["18641855262210758223561829005807715767","154401289206969666821398410290330701974","36589841541506230703971433069047964922","252493828614876853066203660764707020861"]},"id":"ASB-A-399885815-3c663aea","signature_type":"Line","signature_version":"v1"},{"id":"ASB-A-399885815-5fd6794e","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Wifi/+/7b7af167d8025ea3e80f60f24c701b951b7133dd","target":{"file":"service/java/com/android/server/wifi/util/WifiPermissionsUtil.java","function":"isSystem"},"deprecated":false,"digest":{"length":357,"function_hash":"30939875276682431282827196200442461147"}}],"fixes":["https://android.googlesource.com/platform/packages/modules/Wifi/+/7b7af167d8025ea3e80f60f24c701b951b7133dd"],"severity":"High","spl":"2025-09-01","types":["DoS"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-399885815.json"}}],"schema_version":"1.9.0"}