Skip to content
OpenAdvisories
Medium · 4.0 CVE-2025-22415 EUVD-2025-27221GHSA-89jc-xxc9-wc55

In android_app of Android.bp, there is a possible way to launch any activity as a system user. This could lead to local escalation of privi…

Published Sep 4, 2025 · Updated Nov 3, 2026 · Assigned by google_android

Description

In android_app of Android.bp, there is a possible way to launch any activity as a system user. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android 14, 13 —

References