CVE-2025-22425: Input Validation
Published May 5, 2025
·Updated
In onCreate of InstallStart.java, there is a possible permissions bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
Affected Software
3 affected components
Google Android
Google Android=13.0
Google Android=14.0
Event History
May 5, 2025
CVE Published
via Android·12:00 AM
Data Sourced
via Android·12:00 AM
SeverityWeaknessAffected Software
Sep 4, 2025
CVE Published
via MITRE·05:11 PM
Data Sourced
via MITRE·05:11 PM
DescriptionWeakness
Data Sourced
via NVD·06:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-22425?
CVE-2025-22425 is classified as a medium severity vulnerability due to its potential for local privilege escalation.
2
How do I fix CVE-2025-22425?
To fix CVE-2025-22425, update your Android device to the latest security patch provided by Google.
3
What type of vulnerability is CVE-2025-22425?
CVE-2025-22425 is a permissions bypass vulnerability caused by improper input validation.
4
What can be affected by CVE-2025-22425?
CVE-2025-22425 affects devices running vulnerable versions of Google Android.
5
Does CVE-2025-22425 require user interaction for exploitation?
Yes, exploitation of CVE-2025-22425 requires user interaction.