---
id: CVE-2025-48526
title: >-
  In createMultiProfilePagerAdapter of ChooserActivity.java , there is a
  possible way for an app to launch the ChooserActivity in another profile due
  to improper input validation
summary: >-
  In createMultiProfilePagerAdapter of ChooserActivity.java , there is a
  possible way for an app to launch the ChooserActivity in another profile due
  to improper input validation. This could lead to local escalation of privilege
  with no ad…
severity: medium
cvss: 4
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
cvssSource: adp
vendor: Google
product: Android
affected:
  - Android 16
  - Android 15
  - Android 14
  - Android 13
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2025-09-06T03:56:12.048428Z'
published: '2025-09-04'
updated: '2026-11-03'
sourceUpdated: '2026-11-03T22:03:04.765Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-48526'
references:
  - url: >-
      https://android.googlesource.com/platform/packages/modules/IntentResolver/+/923a5673ac9d4b366097a8912a04e40e85111ed4
  - url: 'https://source.android.com/security/bulletin/2025-09-01'
tags:
  - cve.org
epss: 0.0009
epssPercentile: 0.0042
ingestedAt: '2026-11-05T20:33:06.563Z'
---

## Overview

In createMultiProfilePagerAdapter of ChooserActivity.java , there is a possible way for an app to launch the ChooserActivity in another profile due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

## Affected

- `Android 16`
- `Android 15`
- `Android 14`
- `Android 13`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.