In multiple locations, there is a possible way to execute arbitrary code due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.4 | CVE-2025-22410 |
Exploitation
The vulnerability can be exploited locally without any user interaction. An attacker can leverage the use after free condition to execute arbitrary code, potentially leading to a local escalation of privileges.
Affected Products
- Android OS: The vulnerability affects various versions of the Android operating system, allowing for potential privilege escalation.
Mitigation
To mitigate this vulnerability, users should ensure their Android devices are updated to the latest security patches provided by the manufacturer. Regularly checking for updates can help protect against known vulnerabilities.