Skip to content
NewA calmer, faster ZeroHour
Exploit / PoChighExploited in the wild

New Pixnapping Android Flaw Lets Rogue Apps Steal 2FA Codes Without Permissions

The Hacker Newsby @TheHackersNews ()4 min read3 · 1 read
Analyze CVE-2025-48561 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2025-48561
In multiple locations, there is a possible way to access data displayed on the screen due to side channel information disclosure
5.5<1%PoC

From the original article

4 min read at thehackernews.com

Android devices from Google and Samsung have been found vulnerable to a side-channel attack that could be exploited to covertly steal two-factor authentication (2FA) codes, Google Maps timelines, and other sensitive data without the users' knowledge pixel-by-pixel.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.