Share:
Notifications
Clear all

CVE-2025-0089

1 Posts
1 Users
0 Reactions
8 Views
(@rinki)
Posts: 78
Trusted Member
Topic starter
 

Description

In multiple locations, there is a possible way to hijack the Launcher app due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References 

https://android.googlesource.com/platform/frameworks/base/+/ed39b7c3895c8c63a1ccdbcc9783a2d3ca15127f

https://android.googlesource.com/platform/frameworks/base/+/f27918b39cffb404ed429829f93b20344310da34

https://android.googlesource.com/platform/frameworks/base/+/fd66d834553ffab769ef21017bff95bdfd138493

https://source.android.com/security/bulletin/2025-09-01

https://nvd.nist.gov/vuln/detail/CVE-2025-0089

 
Posted : 09/02/2026 10:58 pm
Share: