Skip to content
OpenAdvisories
High · 7.8 CVE-2025-32322 EUVD-2025-26852GHSA-729j-qrcp-p66p

In onCreate of MediaProjectionPermissionActivity.java , there is a possible way to grant a malicious app a token enabling unauthorized scre…

Published Sep 4, 2025 · Updated Sep 4, 2025 · Assigned by google_android

Description

In onCreate of MediaProjectionPermissionActivity.java , there is a possible way to grant a malicious app a token enabling unauthorized screen recording capabilities due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android 14, 13 —

References