CVEvulnerability
CVE-2025-22435
9.8 CRITICAL
Official page ↗
- Status
- Analyzed
- Published
- 2025-09-02
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-843
Description
In avdt_msg_ind of avdt_msg.cc, there is a possible memory corruption due to type confusion. This could lead to paired device escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected configurations
• google android 13.0
• google android 14.0
• google android 15.0
Related
Weakness · CWE (1)
- CWE-843 Access of Resource Using Incompatible Type weakness