PT-2025-31844 · Android · Android

Published 2025-08-01 · Updated 2025-09-25 · CVE-2025-22441

Positive Technologies · (AI Summary)

CVSS v3.1

7.3

High

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Android (affected versions not specified)

Description The vulnerability relates to insufficient access control within the Framework component of Android operating systems. Exploitation may allow an attacker to elevate their privileges. The issue involves an object read from the RemoteViews bundle provided by the Widget providing app, which could contain inaccurate data fields.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Improper Access Control

Weakness Enumeration

CWE-441

CWE-264

CWE-284

Related Identifiers

ASB-A-376028556

BDU:2025-09416

CVE-2025-22441

Affected Products

Android

References · 13

• https://nvd.nist.gov/vuln/detail/CVE-2025-22441 · Security Note
• https://source.android.com/security/bulletin/2025-08-01 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-22441 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-09416 · Security Note
• https://osv.dev/vulnerability/ASB-A-376028556 · Vendor Advisory
• https://twitter.com/CVEnew/status/1963675058716434923 · Twitter Post
• https://anti-malware.ru/news/2025-08-05-111332/46888 · Note
• https://twitter.com/stooee_/status/1966215261901529180 · Twitter Post
• https://source.android.com/docs/security/bulletin/2025-08-01?hl=ru · Note
• https://cyberscoop.com/android-security-update-august-2025 · Note
• https://twitter.com/abhishekwebcode/status/1956638097732689992 · Twitter Post
• https://twitter.com/xvonfers/status/1952426076942082287 · Twitter Post
• https://t.me/cveNotify/134439 · Telegram Post