CVE-2025-0089: Android Framework Base Package Local Privilege Escalation Vulnerability
Summary
CVE-2025-0089: In multiple locations, there is a possible way to hijack the Launcher app due to a logic error in the code. Affects platform/frameworks/base across 4 version ranges.
>= 13:0, < 13:2025-09-01
>= 14:0, < 14:2025-09-01
>= 15:0, < 15:2025-09-01
>= 16-next:0, < 16-next:2025-09-01
Fixed in 16-next:2025-09-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Android Framework Base package is a core component of the Android operating system, responsible for providing essential services and functionalities to applications. It includes key features such as activity management, window management, and system services. This package is critical for the overall operation of Android devices, making its security paramount. The vulnerability in question allows for local privilege escalation, potentially compromising the integrity of the device's user interface and application management.
Vulnerability Detail
In multiple locations within the Android Framework Base package, a logic error exists that could allow an attacker to hijack the Launcher app. This vulnerability can lead to local escalation of privilege without requiring additional execution privileges. User interaction is not necessary for exploitation, making it a significant risk for users. The vulnerability arises from improper handling of intents and activity management, which could be exploited to gain unauthorized access to system-level functionalities.
How To Fix
Minimum fixed version
16-next:2025-09-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can restrict the permissions of applications that may exploit this vulnerability. Additionally, users should avoid installing untrusted applications that could potentially leverage this flaw to gain unauthorized access.
Conclusion
CVE-2025-0089 represents a significant security risk within the Android Framework Base package, allowing for local privilege escalation. Users are encouraged to update their systems to the latest patched versions to mitigate this risk. Utilizing tools like Vulert can help monitor and identify vulnerabilities in real-time.
See every vulnerability recorded for platform/frameworks/base →
FAQ
CVE-2025-0089 is a vulnerability in the Android Framework Base package that allows for local privilege escalation due to a logic error in the code.
You can check if your application is affected by using the Vulert playground at Vulert Scanner, which monitors open-source vulnerabilities in real-time.
The vulnerability could allow attackers to hijack the Launcher app, leading to unauthorized access to system functionalities without user interaction.
Yes, patches are available for various versions of the Android Framework Base package. Users should update to the latest patched version.
If you cannot update, consider restricting app permissions and avoiding untrusted applications until a fix is applied.
References
Related vulnerabilities
Recent vulnerabilities recorded for platform/frameworks/base.
