CVE-2025-26450

In onInputEvent of IInputMethodSessionWrapper.java, there is a possible way for an untrusted app to inject key and motion events to the default IME due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction ...

CVE-2025-26450

A high-severity Elevation of Privilege (EoP) vulnerability exists in the Android Framework component within IInputMethodSessionWrapper.java. Due to a missing permission check in the onInputEvent function, an untrusted application can inject key and motion events into the default Input Method Edit...