In multiple locations, there is a possible way to reveal images across users due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
History

Mon, 01 Jun 2026 23:15:00 +0000

Type Values Removed Values Added
Title Android Image Disclosure and Privilege Escalation via Improper Input Validation
Weaknesses CWE-20
CWE-200
CWE-284

Mon, 01 Jun 2026 22:45:00 +0000

Type Values Removed Values Added
First Time appeared Google
Google android
Vendors & Products Google
Google android

Mon, 01 Jun 2026 21:45:00 +0000

Type Values Removed Values Added
Description In multiple locations, there is a possible way to reveal images across users due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: google_android

Published:

Updated: 2026-06-01T21:14:48.951Z

Reserved: 2025-01-06T17:45:03.361Z

Link: CVE-2025-22424

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-06-01T22:16:17.397

Modified: 2026-06-01T22:16:17.397

Link: CVE-2025-22424

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-06-01T23:00:16Z