CNNVD-202509-093 Information

CNNVD ID

CNNVD-202509-093

CVE-2025-22438

  • CNNVD Published: 2025-09-02

Description (Chinese)

Google Android是美国谷歌(Google)公司的一套以Linux为基础的开源操作系统。 Google Android存在安全漏洞,该漏洞源于InputDispatcher.cpp中afterKeyEventLockedInterruptable函数存在释放后重用问题,可能导致本地权限提升。

Description (English)

Google Android is a Linux-based open source operating system of Google. Google Android has a security loophole, which stems from the release re-use problem of the Input Dispatcher.cpp ’ s afterKeyEventLockedInterruptable function, which may lead to an increase in local privileges.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

GoPlace!

Published

2025-09-02

Last Modified

2026-02-24

References

https://source.android.com/security/bulletin/2025-04-01 https://android.googlesource.com/platform/frameworks/native/+/7ac747cb442d382c74a18d26268b7fc3751537ce https://nvd.nist.gov/vuln/detail/CVE-2025-22438 https://access.redhat.com/security/cve/cve-2025-22438 https://vigilance.fr/vulnerability/Google-Android-Pixel-multiple-vulnerabilities-of-April-2025-46785

Patch

https://source.android.com/security/bulletin/2025-04-01

Share on: