CVE-2025-0077

In multiple functions of UserController.java, there is a possible lock screen bypass due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

• CWE-1223

• https://android.googlesource.com/platform/frameworks/base/+/37a4df78c7e1b91066b341b05fb767f27c5da835Patch, Product
• https://android.googlesource.com/platform/frameworks/base/+/3b04c948727c35e6ad429eefc6aaa9c261addf12Patch, Product
• https://android.googlesource.com/platform/frameworks/base/+/5f59ac63cb7042d58dae196e890ec52424ebe8b5Patch, Product
• https://android.googlesource.com/platform/frameworks/base/+/8c290a4d87c27a4ad65757e97ff9e634d9fe865ePatch, Product
• https://android.googlesource.com/platform/frameworks/base/+/a09b6451c99f8aa99c49a0e584e12be455c414f4Patch, Product
• https://android.googlesource.com/platform/frameworks/base/+/c059123b8e9c0920a30f896513116a8b88bfc4e1Patch, Product
• https://source.android.com/security/bulletin/2025-05-01Vendor Advisory

Published

Sep 4, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-0071SAP Web Dispatcher and Internet Communication Manager allow …4.9
• CVE-2025-0072Use After Free vulnerability in Arm Ltd Valhall GPU Kernel D…7.8
• CVE-2025-0073Use After Free vulnerability in Arm Ltd Valhall GPU Kernel D…7.8
• CVE-2025-0074In process_service_attr_rsp of sdp_discovery.cc, there is a …9.8
• CVE-2025-0075In process_service_search_attr_req of sdp_server.cc, there i…9.8
• CVE-2025-0076In multiple locations, there is a possible way to view icons…3.3
• CVE-2025-0078In main of main.cpp, there is a possible way to bypass SELin…8.8
• CVE-2025-0079In multiple locations, there is a possible way that avdtp an…7.8
• CVE-2025-0080In multiple locations, there is a possible way to overlay th…7.8
• CVE-2025-0081In dng_lossless_decoder::HuffDecode of dng_lossless_jpeg.cpp…7.5
• CVE-2025-0082In multiple functions of StatusHint.java and TelecomServiceI…5.5
• CVE-2025-0083In multiple locations, there is a possible way to access con…4