Exploitation ongoing with high activity in latest observed window (1 mentions)
Recommended action window: Immediate (within 24h)
NVD description
In multiple locations, there is a possible way to access data displayed on the screen due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Priority
LOW
Exploitation
ACTIVE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
4 versions affected across 1 product
GPU side-channel attacks (e.g., Pixnapping, CVE-2025-48561): Malicious Android apps exploit GPU rendering timing to reconstruct on-screen data (e.g., 2FA codes, messages) by analyzing how pixels are processed.
Post summary
CVE‑2025‑48561 exposes a GPU rendering timing side‑channel that malicious Android apps can exploit to read on‑screen data, indicating active exploitation in the wild.
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | android | 13.0 | - | - | |
| OS | android | 14.0 | - | - | |
| OS | android | 15.0 | - | - | |
| OS | android | 16.0 | - | - |