CVE-2025-22424

HighCVSS 7.8/10Last modified Jul 22, 2026

Description

In multiple locations, there is a possible way to reveal images across users due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published
Jun 1, 2026
Last modified
Jul 22, 2026
NVD status
Modified

Related CVEs from 2025

CVE-2025-224255.1In onCreate of InstallStart.java, there is a possible permissions bypass due to improper input validation. This could lead to local escalatiCVE-2025-224267.8In many functions of ComputerEngine.java, there is a possible way to access URIs across users due to a logic error in the code. This could lCVE-2025-224277.3In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way to grant notification access above the lock screen due tCVE-2025-224287.8In hasInteractAcrossUsersFullPermission of AppInfoBase.java, there is a possible way to grant permissions to an app on the secondary user frCVE-2025-224299.8In multiple locations, there is a possible way to execute arbitrary code due to a logic error in the code. This could lead to local escalatiCVE-2025-22437.3A server-side request forgery (SSRF) vulnerability in Bitdefender GravityZone Console allows an attacker to bypass input validation logic usCVE-2025-224305.5In isInSignificantPlace of multiple files, there is a possible way to access sensitive information due to a missing permission check. This cCVE-2025-224315.5In multiple locations, there is a possible method for a malicious app to prevent dialing emergency services under limited circumstances due CVE-2025-224326.7In notifyTimeout of CallRedirectionProcessor.java, there is a possible persistent connection due to improper input validation. This could leCVE-2025-224337.8In canForward of IntentForwarderActivity.java, there is a possible bypass of the cross profile intent filter most commonly used in Work ProfCVE-2025-224347.8In handleKeyGestureEvent of PhoneWindowManager.java, there is a possible lock screen bypass due to a logic error in the code. This could leaCVE-2025-224359.8In avdt_msg_ind of avdt_msg.cc, there is a possible memory corruption due to type confusion. This could lead to paired device escalation of
CVE-2025-22424: High severity, CVSS 7.8 | Vulnix