PT-2025-36045 · Unknown · Voicemailsettingsactivity.Java

CVE-2025-32346 · Publicado 2025-09-01 · Atualizado 2025-09-05

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions VoicemailSettingsActivity.java (affected versions not specified)

Description A potential work profile contact number leak exists due to a confused deputy condition within the onActivityResult function of the VoicemailSettingsActivity.java file. This issue could lead to local escalation of privilege without requiring additional execution privileges or user interaction.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-441

Identificadores relacionados

ASB-A-337785563

BDU:2025-11576

CVE-2025-32346

Produtos afetados

Voicemailsettingsactivity.Java

Referências · 8

• https://twitter.com/CVEnew/status/1963827295501848576 · Publicação no Twitter
• https://source.android.com/security/bulletin/2025-09-01 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2025-32346 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-32346 · Nota de Segurança
• https://android.googlesource.com/platform/packages/services/Telephony/+/ccfb4f0691ca97be5b5593e65bd26e843641f929 · Nota
• https://osv.dev/vulnerability/ASB-A-337785563 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2025-11576 · Nota de Segurança
• https://android.googlesource.com/platform/packages/services/Telephony/+/76467ce5606ca15a23125e1979ada74ba843cd6a · Nota