CVE-2025-32347 in Androidinformación

Resumen

por MITRE • 2025-09-04

In onStart of BiometricEnrollIntroduction.java, there is a possible way to determine the device's location due to an unsafe PendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

Google Android

Reservar

2025-04-05

Divulgación

2025-09-04

Moderación

aceptado

Artículo

VDB-322651

CPE

listo

EPSS

0.00008

KEV

no

Actividades

muy bajo

Sector

Homeoffice, Police, ...

Fuentes

MITREhttps://www.cve.org/CVERecord?id=CVE-2025-32347
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2025-32347
CVE Detailshttps://www.cvedetails.com/cve/CVE-2025-32347/

◂ AnteriorVisión De ConjuntoPróximo ▸

Want to know what is going to be exploited?

We predict KEV entries!