Android Battery Service Implicit Intent Hijacking Vulnerability Allowing Privilege Escalation

Vulnerability

A vulnerability has been identified in the Android BatteryService component, specifically within multiple functions of BatteryService.java. This issue allows for the hijacking of implicit intents intended for system applications, potentially leading to unauthorized privilege escalation. The vulnerability does not require any additional execution privileges or user interaction for exploitation.

Impact

Exploitation of this vulnerability could result in unauthorized elevation of privileges, allowing a user to gain access to restricted functions or data.

Remediation

Users can update their devices to the September 2025 security patch level to address this vulnerability.

Added: Sep 4, 2025, 8:04 PM
Updated: Sep 4, 2025, 8:38 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
1.3
exploitability
5.3
remediation
0.0
relevance
0.5
threat
3.2
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.