cbcvebase.
CVE-2025-26419
published 2025-09-04

CVE-2025-26419: In initPhoneSwitch of SystemSettingsFragment.java, there is a possible FRP bypass due to a logic error in the code. This could lead to local escalation of…

low3.3CVSS 3.1
AVLACLPRNUIRSUCLINAN
In initPhoneSwitch of SystemSettingsFragment.java, there is a possible FRP bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

Affected

4 ranges
VendorProductVersion rangeFixed in
googleandroid
googleandroid
googleandroid
googleandroid