Published
2025-09-04
·
Updated
2025-09-05
·
CVE-2025-26419
3.3
Low
| Base vector | Vector | AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions:
SystemSettingsFragment.java (affected versions not specified)
Description:
A logic error exists in the `initPhoneSwitch` function within `SystemSettingsFragment.java`. This issue may lead to a Factory Reset Protection (FRP) bypass, potentially resulting in local escalation of privilege without requiring additional execution privileges. User interaction is required for exploitation.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Authentication Bypass by Spoofing