CVE-2025-32324: Android Frameworks Base Arbitrary Activity Launch Vulnerability
Summary
CVE-2025-32324: In onCommand of ActivityManagerShellCommand.java, there is a possible arbitrary activity launch due to a confused deputy. Affects platform/frameworks/base across 3 version ranges.
>= 15:0, < 15:2025-09-01
>= 16:0, < 16:2025-09-01
>= 16-next:0, < 16-next:2025-09-01
Fixed in 16-next:2025-09-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Android Frameworks Base package is a core component of the Android operating system, responsible for providing essential services and APIs that applications rely on. It manages system-level functions, including activity management, which allows apps to interact with the user interface and system resources. This package is critical for the stability and security of the Android ecosystem, making any vulnerabilities within it particularly concerning.
Vulnerability Detail
In the onCommand method of ActivityManagerShellCommand.java, there exists a vulnerability that allows for a possible arbitrary activity launch due to a confused deputy. This vulnerability can lead to local escalation of privilege without requiring additional execution privileges. The exploitation of this vulnerability does not necessitate user interaction, making it a significant security risk.
How To Fix
Minimum fixed version
16-next:2025-09-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is recommended to apply the patch as soon as it is available to mitigate the risk.
Conclusion
The CVE-2025-32324 vulnerability in the Android Frameworks Base package poses a significant risk due to its potential for arbitrary activity launches and local privilege escalation. Immediate action is recommended to update the affected package to the patched version to ensure system security.
See every vulnerability recorded for platform/frameworks/base →
FAQ
CVE-2025-32324 is a vulnerability in the Android Frameworks Base package that allows for arbitrary activity launches, potentially leading to local privilege escalation.
You can use Vulert, which monitors open-source vulnerabilities in real-time. By utilizing the Vulert playground at Vulert Scanner, you can check if your application is affected without needing to sign up.
The primary risk is local escalation of privilege, which could allow an attacker to execute unauthorized actions within the application or system.
No, user interaction is not needed for exploitation, making it a more serious security concern.
While there are no specific workarounds, it is crucial to prioritize updating to the patched version as soon as possible to mitigate the risk.
Related vulnerabilities
Recent vulnerabilities recorded for platform/frameworks/base.
