CVE-2026-0025: Infoleak
In hasImage of Notification.java, there is a possible way to reveal information across users due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/platform/frameworks/baseto a version that resolves this vulnerability.Fixed in 16-qpr2-next:2026-03-01 - Upgrade
Upgrade
android/platform/frameworks/baseto a version that resolves this vulnerability.Fixed in 15:2026-03-01 - Upgrade
Upgrade
android/platform/frameworks/baseto a version that resolves this vulnerability.Fixed in 16:2026-03-01 - Upgrade
Upgrade
android/platform/frameworks/baseto a version that resolves this vulnerability.Fixed in 16-qpr2:2026-03-01 - Upgrade
Upgrade
android/platform/frameworks/baseto a version that resolves this vulnerability.Fixed in 14:2026-03-01
Event History
Frequently Asked Questions
What is the severity of CVE-2026-0025?
CVE-2026-0025 has a high severity due to its potential for information disclosure and local privilege escalation.
How do I fix CVE-2026-0025?
To mitigate CVE-2026-0025, update your Android device to the latest version provided by Google.
What versions of Android are affected by CVE-2026-0025?
CVE-2026-0025 affects Google Android versions 14.0, 15.0, and 16.0 up to qpr2_beta_3.
What type of vulnerability is CVE-2026-0025?
CVE-2026-0025 is a permissions bypass vulnerability that could allow for information disclosure across users.
Is user interaction required to exploit CVE-2026-0025?
No, user interaction is not needed to exploit CVE-2026-0025.