Actively exploited in the wild. Patch or mitigate immediately — don't wait for a maintenance window.
An unauthenticated attacker, from the same local network, with no user interaction, can fully compromise the system — steal data, tamper with it and take it offline.
In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Inferred from the weakness type (CWE) and how the flaw is reached — the techniques an attacker would chain to exploit this. Real-world corroboration appears here as threat intel is folded in.
Corroborated threat activity referencing this CVE — with source and confidence, not inference.
Named threat actors and observed ATT&CK techniques appear here as intel feeds are folded in — the ATT&CK chain above stays inferred until then.
Generated by Wavense from the CVE record — an immediate mitigation and the permanent fix.
Isolate cellular modems on a separate network segment with strict ingress/egress filtering, allowing only necessary management traffic from trusted sources. Implement robust network monitoring to detect unusual connection attempts, unauthorized configuration changes, or anomalous data flows to and from the modem. Regularly review modem access logs for any suspicious activity.
Apply the vendor-provided software update or firmware patch as soon as it becomes available to address the underlying logic error. Consult the vendor's security advisories and release notes to identify affected modem models and confirm the correct update package. Ensure all cellular modems are upgraded to the latest secure version to permanently resolve this privilege escalation vulnerability.
An attacker can remotely escalate privileges on the Cellular Modem without needing prior execution rights or user interaction. This allows unauthorized control over the modem's operations, potentially leading to interception of communications, unauthorized data access, or misuse of the device for further network penetration. Such compromise could result in significant data breaches, service disruptions, and reputational damage.
Other CVEs affecting android
Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code.
Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to execute arbitrary code.
In multiple locations, there is a possible way to escape chrome sandbox to attack android system_server due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
In multiple locations, there is a possible way to achieve code execution due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
In multiple locations, there is a possible way to launch activities from the background due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.