CVE-2025-22432 in Androidinformación

Resumen

por MITRE • 2025-12-08

In notifyTimeout of CallRedirectionProcessor.java, there is a possible persistent connection due to improper input validation. This could lead to local escalation of privilege and background activity launches with User execution privileges needed. User interaction is not needed for exploitation.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

Google Android

Reservar

2025-01-06

Divulgación

2025-12-08

Moderación

aceptado

Artículo

VDB-334820

CPE

listo

EPSS

0.00056

KEV

no

Actividades

muy bajo

Sector

Homeoffice, Insurance, ...

Fuentes

MITREhttps://www.cve.org/CVERecord?id=CVE-2025-22432
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2025-22432
CVE Detailshttps://www.cvedetails.com/cve/CVE-2025-22432/

◂ AnteriorVisión De ConjuntoPróximo ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!