CVE-2025-0089: High severity Google Android vulnerability
Published Sep 2, 2025
·Updated
In multiple locations, there is a possible way to hijack the Launcher app due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
4 affected components
Google Android
Google Android=13.0
Google Android=14.0
Google Android=15.0
Event History
Sep 2, 2025
CVE Published
via Android·12:00 AM
Data Sourced
via Android·12:00 AM
SeverityWeaknessAffected Software
Sep 4, 2025
CVE Published
via MITRE·06:33 PM
Data Sourced
via MITRE·06:33 PM
DescriptionWeakness
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-0089?
CVE-2025-0089 is classified as a high-severity vulnerability due to its potential for local privilege escalation.
2
What systems are affected by CVE-2025-0089?
CVE-2025-0089 affects the Google Android operating system.
3
How do I fix CVE-2025-0089?
To mitigate CVE-2025-0089, users should update their Google Android device to the latest available version.
4
What could happen if CVE-2025-0089 is exploited?
Exploitation of CVE-2025-0089 could lead to local escalation of privileges, allowing unauthorized actions within the Launcher app.
5
Is user interaction required to exploit CVE-2025-0089?
No, user interaction is not needed for the exploitation of CVE-2025-0089.