CVE-2025-26420: 
NixOS vulnerability analysis and mitigation

CVE-2025-26420 is a high-severity local privilege escalation vulnerability affecting the Android System component. The vulnerability was disclosed as part of Google's May 2025 Android Security Bulletin and affects Android devices running security patch levels prior to May 5, 2025 (CIS Advisory, GBHackers).

The vulnerability is classified under the MITRE ATT&CK framework as a Privilege Escalation (TA0004) technique. It affects the Android System component and is one of several privilege escalation vulnerabilities addressed in the May 2025 security update. The vulnerability received a CVSS v3.1 base score rating, though the specific score is not provided in the available sources (CIS Advisory).

Successful exploitation of CVE-2025-26420 could allow an attacker to elevate privileges within the Android system. The vulnerability has been observed being paired with other exploits to create rootkits targeting financial applications (GBHackers).

Google has released patches for this vulnerability through the May 2025 security update. The fix is being distributed through Google Play System Updates and rolls out automatically through Google Play Services. Users and administrators are advised to ensure their devices are updated to the 2025-05-05 security patch level or newer (GBHackers, CIS Advisory).