In multiple functions of hyp-main.c, there is a possible privilege escalation due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4 | CVE-2025-22413 |
Exploitation
The vulnerability can be exploited locally without any user interaction. An attacker can leverage the logic error in the hyp-main.c code to escalate privileges and potentially disclose sensitive information.
Affected Products
- Android OS: The vulnerability affects various versions of the Android operating system that utilize the hyp-main.c functions.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security patches provided by Android. Users should ensure their devices are updated to the most recent version to protect against potential exploitation.