CVE-2025-26425
04.09.2025, 18:15
In multiple functions of RoleService.java, there is a possible permission squatting vulnerability due to a logic error in the code. This could lead to local escalation of privilege on versions of Android where android.permission.MANAGE_DEFAULT_APPLICATIONS was not defined with no additional execution privileges needed. User interaction is not needed for exploitation.Enginsight
Vendor | Product | Version |
---|---|---|
android | 14.0 | |
android | 15.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration