Local Escalation of Privilege Vulnerability in Android's DocumentsUI

CVE-2025-22439

What is CVE-2025-22439?

A vulnerability exists in the onLastAccessedStackLoaded method of ActionHandler.java within Android's DocumentsUI. This flaw allows malicious applications to potentially bypass storage access restrictions due to an inadequate permission check. Exploitation of this vulnerability necessitates user interaction, but once executed, it could facilitate local privilege escalation without the need for additional execution privileges.

References