CVE-2025-22438: Android Frameworks Native Package Use After Free Vulnerability
Summary
CVE-2025-22438: In afterKeyEventLockedInterruptable of InputDispatcher.cpp, there is a possible use after free. Affects platform/frameworks/native across 3 version ranges.
>= 13:0, < 13:2025-04-01
>= 14:0, < 14:2025-04-01
>= 15-next:0, < 15-next:2025-04-01
Fixed in 15-next:2025-04-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Android Frameworks Native package is a core component of the Android operating system, responsible for handling low-level system functionalities, including input event management. This package plays a crucial role in ensuring that user inputs are processed efficiently and securely. However, it has been identified to have a vulnerability that could potentially allow local escalation of privileges, posing a significant security risk.
Vulnerability Detail
In the InputDispatcher.cpp file, specifically in the afterKeyEventLockedInterruptable function, there exists a use after free vulnerability. This flaw arises when the system attempts to access memory that has already been freed, which can lead to unpredictable behavior, including the possibility of executing arbitrary code. The vulnerability does not require any additional execution privileges or user interaction for exploitation, making it particularly dangerous.
How To Fix
Minimum fixed version
15-next:2025-04-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds provided for this vulnerability. It is highly recommended to apply the patch as soon as it becomes available to mitigate any risks associated with this issue.
Conclusion
The CVE-2025-22438 vulnerability in the Android Frameworks Native package poses a significant risk due to its potential for local privilege escalation. Users are strongly encouraged to update their systems to the latest patched version to safeguard against this issue. Utilizing tools like Vulert can help monitor and identify vulnerabilities in real-time.
See every vulnerability recorded for platform/frameworks/native →
FAQ
CVE-2025-22438 is a vulnerability in the Android Frameworks Native package that allows for local escalation of privileges due to a use after free error in the input event handling code.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. By utilizing the Vulert playground, you can check if your application is affected by this vulnerability without needing to sign up.
The primary risk is local escalation of privileges, which could allow an attacker to execute arbitrary code on the affected system without requiring additional permissions or user interaction.
Yes, a patch has been released, and users should update to version 15-next:2025-04-01 or later to mitigate the vulnerability.
While there are no specific workarounds, it is crucial to prioritize applying the patch as soon as possible to protect your system from potential exploitation.
Related vulnerabilities
Recent vulnerabilities recorded for platform/frameworks/native.
