CVE-2025-22415

INFO Priority: 0.00 BB Relevance: 0/100
Published: 2025-09-04 Modified: 2026-11-03 First seen: 2026-11-03 Status: pending_score

Description

In android_app of Android.bp, there is a possible way to launch any activity as a system user. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Software (2)

VendorProductVersion
Google Android 14
Google Android 13

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

0.08%
Raw Score 0.000790
Percentile 0.1%
Date 2026-11-14

EPSS Trend

2026-11-14
0.00079
2026-11-13
0.00079
2026-11-12
0.00079
2026-11-10
0.00079
2026-11-09
0.00079
2026-11-08
0.00079
2026-11-07
0.00079
2026-11-06
0.00079
2026-11-05
0.00079
2026-11-04
0.00079
2026-11-03
0.00079

Intelligence Sources

mitre ref →