CVE-2025-26420
CVE-2025-26420
In multiple functions of GrantPermissionsActivity.java , there is a possible way to trick the user into granting the incorrect permission due to permission overload. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Productos afectados
Google · Android¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →