CVE-2025-22425

MediumCVSS 5.1/10Last modified Jun 17, 2026

Description

In onCreate of InstallStart.java, there is a possible permissions bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

Metrics

CVSS 3.1 5.1/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-276

Affected software

No affected versions have been published.

Timeline

Published
Sep 4, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-224267.8In many functions of ComputerEngine.java, there is a possible way to access URIs across users due to a logic error in the code. This could lCVE-2025-224277.3In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way to grant notification access above the lock screen due tCVE-2025-224287.8In hasInteractAcrossUsersFullPermission of AppInfoBase.java, there is a possible way to grant permissions to an app on the secondary user frCVE-2025-224299.8In multiple locations, there is a possible way to execute arbitrary code due to a logic error in the code. This could lead to local escalatiCVE-2025-22437.3A server-side request forgery (SSRF) vulnerability in Bitdefender GravityZone Console allows an attacker to bypass input validation logic usCVE-2025-224305.5In isInSignificantPlace of multiple files, there is a possible way to access sensitive information due to a missing permission check. This cCVE-2025-224315.5In multiple locations, there is a possible method for a malicious app to prevent dialing emergency services under limited circumstances due CVE-2025-224326.7In notifyTimeout of CallRedirectionProcessor.java, there is a possible persistent connection due to improper input validation. This could leCVE-2025-224337.8In canForward of IntentForwarderActivity.java, there is a possible bypass of the cross profile intent filter most commonly used in Work ProfCVE-2025-224347.8In handleKeyGestureEvent of PhoneWindowManager.java, there is a possible lock screen bypass due to a logic error in the code. This could leaCVE-2025-224359.8In avdt_msg_ind of avdt_msg.cc, there is a possible memory corruption due to type confusion. This could lead to paired device escalation of CVE-2025-224377.8In setMediaButtonReceiver of multiple files, there is a possible way to launch arbitrary activities from background due to a logic error in
CVE-2025-22425: Medium severity, CVSS 5.1 | Vulnix