CVE-2025-20779: Use After Free
In display, there is a possible use after free due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10184084; Issue ID: MSV-4720.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch ALPS10184084
Event History
Frequently Asked Questions
What is the severity of CVE-2025-20779?
The severity of CVE-2025-20779 is considered to allow local escalation of privilege.
How do I fix CVE-2025-20779?
You can fix CVE-2025-20779 by applying the patch ID ALPS10184084 that addresses this vulnerability.
What are the affected software versions for CVE-2025-20779?
CVE-2025-20779 affects Google Android versions 14.0, 15.0, and 16.0.
Is user interaction required to exploit CVE-2025-20779?
No, user interaction is not needed to exploit CVE-2025-20779.
What type of vulnerability is CVE-2025-20779?
CVE-2025-20779 is a use after free vulnerability caused by a race condition.