CVE-2025-22431: 
NixOS vulnerability analysis and mitigation

CVE-2025-22431 is a local denial-of-service vulnerability in Google Android that allows a malicious app to prevent dialing emergency services under limited circumstances due to a logic error in the code. It affects Android versions 13.0, 14.0, and 15.0. The vulnerability was disclosed as part of the Android Security Bulletin for April 2025, published on April 7, 2025. It carries a CVSS v3.1 base score of 5.5 (Medium) (Android Bulletin).

The root cause is classified as CWE-693 (Protection Mechanism Failure), stemming from a logic error present in multiple locations within the Android codebase. The flaw allows a locally installed malicious application to interfere with the emergency calling mechanism, effectively blocking emergency service dialing until the device is rebooted. Exploitation requires only low privileges and no user interaction, making it accessible to any installed app with minimal permissions (Android Bulletin).

Successful exploitation results in a local denial-of-service condition specifically targeting the device's ability to place emergency calls, persisting until the phone is rebooted. There is no impact on confidentiality or integrity — only availability is affected. In emergency situations, this could have serious real-world consequences for users unable to contact emergency services (Android Bulletin).

No public proof-of-concept exploit code or in-the-wild exploitation has been reported for CVE-2025-22431. The EPSS score is extremely low at 0.009%, indicating a very low probability of exploitation in the near term. The vulnerability is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog. Exploitation requires a malicious app to be installed on the target device, limiting the attack surface (Android Bulletin).

Google released a patch addressing CVE-2025-22431 as part of the Android Security Bulletin dated April 1, 2025, with patches made available on April 7, 2025. Users and administrators should apply the April 2025 security patch level (2025-04-01 or later) to affected Android 13, 14, and 15 devices. Samsung also incorporated this fix in its April 2025 security patch release. No configuration-based workarounds are known; updating to the patched security patch level is the recommended remediation (Android Bulletin).

Samsung published details of its April 2025 security patch, which included fixes for over 60 vulnerabilities including CVE-2025-22431, indicating broad OEM adoption of the patch (Samsung Fans). Huawei also referenced this CVE in its EMUI July 2025 security details. No significant independent researcher commentary or notable media coverage specific to this vulnerability has been identified.