What is CVE-2025-22431?

CVE-2025-22431 is a medium-severity vulnerability in Google Android, classified under Protection Mechanism Failure. CVSS score: 5.5/10. Published 2025-09-02.

How severe is CVE-2025-22431?

Medium severity. CVSS v3 base score is 5.5 out of 10.

Vulnerability in Google Android

CVE-2025-22431

In multiple locations, there is a possible method for a malicious app to prevent dialing emergency services under limited circumstances due to a logic error in the code. This could lead to local denial of service until the phone reboots with no additional execution privileges needed. User interaction is not needed for exploitation.

EPSS: 0.001 (0.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

Affected products

Google Android — versions 15.0, 14.0, 13

Weakness classification (CWE)

CWE-693 — Protection Mechanism Failure

References

security@android.com (Product)
security@android.com (Vendor Advisory)

Frequently asked questions

What is CVE-2025-22431?: CVE-2025-22431 is a medium-severity vulnerability in Google Android, classified under Protection Mechanism Failure. CVSS score: 5.5/10. Published 2025-09-02.
How severe is CVE-2025-22431?: Medium severity. CVSS v3 base score is 5.5 out of 10.