CVE-2025-0089
In multiple locations, there is a possible way to hijack the Launcher app due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Vendor
Product
CWE
Yayın Tarihi
2025-09-04 19:15:34
Güncelleme
2025-09-08 16:40:54
Source Identifier
security@android.com
KEV Date Added
-
Kategoriler
Referanslar
https://android.googlesource.com/platform/frameworks/base/+/ed39b7c3895c8c63a1ccdbcc9783a2d3ca15127f
https://android.googlesource.com/platform/frameworks/base/+/f27918b39cffb404ed429829f93b20344310da34
https://android.googlesource.com/platform/frameworks/base/+/fd66d834553ffab769ef21017bff95bdfd138493
https://source.android.com/security/bulletin/2025-09-01