Description

In getContextForResourcesEnsuringCorrectCachedApkPaths of RemoteViews.java, there is a possible way to load arbitrary java code in a privileged context due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

INFO

Published Date :

2025-09-04T18:17:24.935Z

Last Modified :

2025-09-06T03:55:35.236Z

Source :

google_android
AFFECTED PRODUCTS

The following products are affected by CVE-2025-22441 vulnerability.

Vendors Products
Google
  • Android
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-22441.

CVSS Vulnerability Scoring System