CVEvulnerability

CVE-2025-26429

5.5 MEDIUM Published 2025-09-04 Modified 2026-06-17 Official page ↗

Status: Analyzed
Published: 2025-09-04
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0): 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weaknesses: CWE-20

Description

In collectOps of AppOpsService.java, there is a possible way to cause permanent DoS due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected configurations

• google android 13.0 • google android 14.0 • google android 15.0

Weakness · CWE (1)

CWE-20 Improper Input Validation weakness

References

https://android.googlesource.com/platform/frameworks/base/+/0f3c01c326b6966590c652adec5baa61351756e4 Patch, Product
https://source.android.com/security/bulletin/2025-05-01 Vendor Advisory

CVE-2025-26429

Description

Affected configurations

Related

Weakness · CWE (1)

References