ASB-A-365975561 — Vulnetix

ASB-A-365975561 PUBLISHED

In saveGlobalProxyLocked of DevicePolicyManagerService.java, there is a possible way to desync from persistence due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Products

Vendor	Product	Versions
platform	frameworks/base	16-next:0, 16-next, 15:0

Timeline

Sep 1, 2025 CVE Published
May 15, 2026 CVE Updated

References

https://source.android.com/security/bulletin/2025-09-01 advisory
https://android.googlesource.com/platform/frameworks/base/+/d5fee58e64ae237d4720b67de152c72cad432eae patch

Open in Interactive Console →