ASB-A-392614489 — Vulnetix

ASB-A-392614489 PUBLISHED

In executeAppFunction of AppSearchManagerService.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Products

Vendor	Product	Versions
platform	packages/modules/AppSearch	15:0, 15, 15:0

Timeline

Sep 1, 2025 CVE Published
May 15, 2026 CVE Updated

References

https://source.android.com/security/bulletin/2025-09-01 advisory
https://android.googlesource.com/platform/packages/modules/AppSearch/+/e272ad00529243f766c6ebd4e976549bd4fff4fb patch

Open in Interactive Console →