Lucene search
+L

CVE-2025-22441

🗓️ 04 Sep 2025 18:17:24Reported by google_androidType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 463 Views🌐 WEB

Vulnerability in RemoteViews getContextForResourcesEnsuringCorrectCachedApkPaths enables loading arbitrary Java code in a privileged context, causing local privilege escalation with user interaction.

Related
Detection
Affected
Refs
Paths
Social
NVD
Vulners
Node
OR
googleandroidMatch13.0
googleandroidMatch14.0
googleandroidMatch15.0
[
  {
    "vendor": "Google",
    "product": "Android",
    "versions": [
      {
        "version": "15",
        "status": "affected"
      },
      {
        "version": "14",
        "status": "affected"
      },
      {
        "version": "13",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]
ParameterPositionPathDescriptionCWE
RemoteViews.mApplicationnestedcs.android.com/android/platform/superproject/main/+/main:frameworks/base/core/java/android/widget/RemoteViews.java;l=6545-6561;drc=978f80da915fe0a64d0b6425ce30d5359563b5e9In RemoteViews.getContextForResourcesEnsuringCorrectCachedApkPaths, an untrusted RemoteViews can carry an ApplicationInfo that may be applied to a context, triggering LoadedApk.checkAndUpdateApkPaths and potentially updating resources/classloader in a privileged context.CWE-441
ApplicationInfo.uidnestedcs.android.com/android/platform/superproject/main/+/main:frameworks/base/core/java/android/widget/RemoteViews.java;l=6545-6561;drc=978f80da915fe0a64d0b6425ce30d5359563b5e9In RemoteViews.getContextForResourcesEnsuringCorrectCachedApkPaths, an untrusted RemoteViews can carry an ApplicationInfo that may be applied to a context, triggering LoadedApk.checkAndUpdateApkPaths and potentially updating resources/classloader in a privileged context.CWE-441
ApplicationInfo.packageNamenestedcs.android.com/android/platform/superproject/main/+/main:frameworks/base/core/java/android/widget/RemoteViews.java;l=6545-6561;drc=978f80da915fe0a64d0b6425ce30d5359563b5e9In RemoteViews.getContextForResourcesEnsuringCorrectCachedApkPaths, an untrusted RemoteViews can carry an ApplicationInfo that may be applied to a context, triggering LoadedApk.checkAndUpdateApkPaths and potentially updating resources/classloader in a privileged context.CWE-441
ApplicationInfo.getCodePath()nestedcs.android.com/android/platform/superproject/main/+/main:frameworks/base/core/java/android/widget/RemoteViews.java;l=6545-6561;drc=978f80da915fe0a64d0b6425ce30d5359563b5e9In RemoteViews.getContextForResourcesEnsuringCorrectCachedApkPaths, an untrusted RemoteViews can carry an ApplicationInfo that may be applied to a context, triggering LoadedApk.checkAndUpdateApkPaths and potentially updating resources/classloader in a privileged context.CWE-441

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 08:47Current
6.8Medium risk
Vulners AI Score6.8
CVSS 3.17.3
EPSS0.00105
SSVC
463