CVE-2025-22442

Publication date

2025-09-02 22:11:26

Family

google_android

State

PUBLISHED

Description

In multiple functions of DevicePolicyManagerService.java, there is a possible way to install unauthorized applications into a newly created work profile due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.