Skip to content
Threat Feed
Subscribe

Product

Android (Framework)

1 brief RSS
high advisory

Android Framework: Activity token leak and arbitrary startActivity() (CVE-2025-0098)

A public Proof of Concept has been released for CVE-2025-0098, an activity token leak vulnerability in the Android framework allowing arbitrary startActivity() calls due to insufficient process identifier validation.

Android vulnerability mobile privilege-escalation
1t 1c