Privilege Escalation Vulnerability in Android's FRP Bypass Alert Activity
CVE-2025-22414

7.8HIGH

Key Information:

Vendor

Google
Status
Android
Vendor
CVE Published:
4 September 2025

What is CVE-2025-22414?

A vulnerability exists in the FRP Bypass Alert Activity within the Android framework, stemming from a lack of proper permission checks. This oversight may allow an attacker to exploit the system locally to escalate privileges without requiring additional execution rights or user interaction. As a result, the system could be compromised, making it critical for users to apply the latest security updates to protect their devices from potential exploitation.

Affected Version(s)

Android 14

Android 13

References

https://source.android.com/security/bulletin/wear/2025-03-01

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-22414 : Privilege Escalation Vulnerability in Android's FRP Bypass Alert Activity