ASB-A-337785563

See a problem?

Import Source

https://storage.googleapis.com/android-osv/ASB-A-337785563.json

JSON Data

https://api.osv.dev/v1/vulns/ASB-A-337785563

Aliases

A-337785563
CVE-2025-32346

Published

2025-09-01T00:00:00Z

Modified

2025-09-02T14:59:13.694122Z

Summary

[none]

Details

In onActivityResult of VoicemailSettingsActivity.java, there is a possible work profile contact number leak due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

https://source.android.com/security/bulletin/2025-09-01

Affected packages

Android / platform/packages/services/Telephony

Package

Name: platform/packages/services/Telephony

Affected ranges

Type: ECOSYSTEM
Events: Introduced

16-next:0

Fixed

16-next:2025-09-01

Affected versions

Other

16-next

Ecosystem specific

{
    "vanir_signatures": [
        {
            "signature_type": "Line",
            "deprecated": false,
            "target": {
                "file": "src/com/android/phone/settings/VoicemailSettingsActivity.java"
            },
            "signature_version": "v1",
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "335150637839310035181760972125172764197",
                    "229463411420882683335933865492747910994",
                    "305043842616818144495253197562878611615",
                    "320742581634200750986332344397094788743",
                    "225678098931606204106514976441755381779",
                    "232488540848363512600540503802195645124",
                    "172716372674512372364058482878228555489",
                    "183190653026500008139167059637034675510",
                    "223592661849117920728705484188868025467",
                    "143158762997793711052834879851598431026",
                    "10383710683180359997524424427062356709",
                    "162419901525589163351024668486430460871",
                    "33097472757524046865911224074878369689",
                    "20716120158169367922973200845972751415",
                    "33838568443146616781879216888804528376",
                    "332745355819246896050009365669570395031",
                    "16509948692697771112421212207241914987",
                    "279878483952055589000241758145507912490",
                    "332638559018712484873702830051455293055",
                    "29286538956173876684183755467471389714",
                    "321190589246289033817600196257909355660",
                    "302483269565998390915373741883807929555",
                    "309989415005497133115233110465532208347",
                    "99404072626195762370609691663406370125",
                    "278918762152695712142321771012346730235",
                    "38805117099814541168722717302671255724",
                    "47794251649568610247626964971175890975",
                    "155706134423816887602892989195213757805"
                ]
            },
            "id": "ASB-A-337785563-39ab49f3",
            "source": "https://android.googlesource.com/platform/packages/services/Telephony/+/9eb57535ecb11f271ace6e138b84594474a6e244"
        },
        {
            "signature_type": "Function",
            "deprecated": false,
            "target": {
                "file": "src/com/android/phone/settings/VoicemailSettingsActivity.java",
                "function": "onActivityResult"
            },
            "signature_version": "v1",
            "digest": {
                "length": 2940.0,
                "function_hash": "57894480725379075978923393962981679636"
            },
            "id": "ASB-A-337785563-91744842",
            "source": "https://android.googlesource.com/platform/packages/services/Telephony/+/9eb57535ecb11f271ace6e138b84594474a6e244"
        }
    ],
    "types": [
        "EoP"
    ],
    "severity": "High",
    "spl": "2025-09-01",
    "fixes": [
        "https://android.googlesource.com/platform/packages/services/Telephony/+/9eb57535ecb11f271ace6e138b84594474a6e244"
    ]
}