CVE-2025-20975: Medium severity android aodservice vulnerability
Published May 7, 2025
·Updated
Improper Export of Android Application Components in AODService prior to version 8.8.28.12 allows local attackers to launch arbitrary activity with systemui privilege.
Affected Software
1 affected component
Android AODService<8.8.28.12
Event History
May 7, 2025
CVE Published
via MITRE·08:24 AM
Data Sourced
via MITRE·08:24 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:15 AM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2025-20975?
CVE-2025-20975 is considered a high severity vulnerability due to its potential exploitation by local attackers.
2
How do I fix CVE-2025-20975?
To mitigate CVE-2025-20975, update the AODService to version 8.8.28.12 or later.
3
Who is affected by CVE-2025-20975?
CVE-2025-20975 affects users of the Android AODService running versions prior to 8.8.28.12.
4
What type of attack is associated with CVE-2025-20975?
CVE-2025-20975 allows local attackers to launch arbitrary activities with system UI privileges.
5
Can CVE-2025-20975 be exploited remotely?
CVE-2025-20975 requires local access, meaning it cannot be exploited remotely without physical device access.