CVE-2025-22417: Android Framework Base Package Touch Filtering Bypass Vulnerability
Summary
CVE-2025-22417: In finishTransition of Transition.java, there is a possible way to bypass touch filtering restrictions due to a tapjacking/overlay attack. Affects platform/frameworks/base across 3 version ranges.
>= 14:0, < 14:2025-04-01
>= 15:0, < 15:2025-04-01
>= 15-next:0, < 15-next:2025-04-01
Fixed in 15-next:2025-04-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Android Framework Base package is a core component of the Android operating system, providing essential functionalities and APIs for application development. It serves as the foundation for building Android applications, managing user interactions, and handling system resources. This package is critical for maintaining the security and integrity of applications running on Android devices. However, it is susceptible to vulnerabilities that can lead to security breaches, such as the touch filtering bypass issue described in this report.
Vulnerability Detail
In the finishTransition method of Transition.java, a vulnerability exists that allows for a potential bypass of touch filtering restrictions. This issue arises from a tapjacking or overlay attack, where an attacker can manipulate the user interface to trick users into performing unintended actions. The vulnerability can lead to local escalation of privilege, allowing an attacker to gain unauthorized access to sensitive functionalities without requiring additional execution privileges. User interaction is necessary for exploitation, making it a significant concern for user security.
How To Fix
Minimum fixed version
15-next:2025-04-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is highly recommended to apply the available patches as soon as possible to mitigate the risk.
Conclusion
The CVE-2025-22417 vulnerability in the Android Framework Base package poses a significant risk due to its potential for privilege escalation through touch filtering bypass. It is essential for developers and users to update their packages to the patched versions to mitigate this risk effectively. Regular monitoring and vulnerability management, such as using Vulert, can help maintain application security.
See every vulnerability recorded for platform/frameworks/base →
FAQ
CVE-2025-22417 is a vulnerability in the Android Framework Base package that allows for a bypass of touch filtering restrictions, potentially leading to local privilege escalation.
You can check if your application is affected by using the Vulert playground at Vulert Scanner, which allows you to monitor and alert for open-source vulnerabilities in real-time without requiring any signup.
While there are no specific workarounds available, it is crucial to prioritize updating the package to the patched version as soon as possible to ensure security.
Yes, user interaction is necessary for the exploitation of this vulnerability, as it involves tricking users into performing unintended actions.
The vulnerability can lead to local escalation of privilege, allowing attackers to gain unauthorized access to sensitive functionalities within the application.
Related vulnerabilities
Recent vulnerabilities recorded for platform/frameworks/base.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
