CVE-2025-26422
BaseFortify
Publication date: 2025-09-04
Last updated on: 2025-09-05
Assigner: Android (associated with Google Inc. or Open Handset Alliance)
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| android | 15.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-279 | While it is executing, the product sets the permissions of an object in a way that violates the intended permissions that have been specified by the user. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is due to a missing permission check in the WindowManagerService.java file that allows running the dumpsys command without the required permission. This means an attacker can execute dumpsys locally to access sensitive system information without needing any additional execution privileges or user interaction. [1]
How can this vulnerability impact me? :
The vulnerability can lead to local escalation of privilege by allowing unauthorized users to run dumpsys commands and access sensitive system information. This could compromise system security by exposing internal details that should be protected. [1]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability involves unauthorized execution of dumpsys commands without required permissions. To detect it, you can monitor or attempt to run dumpsys commands and check if permission checks are enforced. For example, running 'adb shell dumpsys window' without proper permissions and observing if it succeeds may indicate vulnerability. Additionally, reviewing system logs for unauthorized dumpsys usage could help detect exploitation attempts. [1]
What immediate steps should I take to mitigate this vulnerability?
Apply the patch that enforces permission checks on dump operations in WindowManagerService.java as described in the fix committed on March 12, 2025. This patch prevents unauthorized dumpsys access by verifying permissions before allowing high-priority dumps. Until the patch is applied, restrict access to dumpsys commands to trusted users only and monitor for unauthorized usage. [1]