CVE-2025-32347

Katalog CVE

CVSS 7.8 · High EPSS 0,09%

Kerentanan Improper Export of Android Application Components pada google android. Skor CVSS 3.1 7.8 (High) menurut CISA ADP.

Deskripsi (NVD)

In onStart of BiometricEnrollIntroduction.java, there is a possible way to determine the device's location due to an unsafe PendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

Rincian

Terbit di NVD

4 September 2025

Terakhir diubah

1 Oktober 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber CISA ADP
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-926: Improper Export of Android Application Components

EPSS (30 hari)

0,09% peluang dieksploitasi; lebih tinggi dari 0,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://source.android.com/security/bulletin/2025-09-01 advisory vendor
• https://android.googlesource.com/platform/packages/apps/Settings/+/25cfacbe5ac2423b8fe1375e0593ef69e98b8d09 patch · product