PT-2025-36237 · Unknown · Permission Manager

CVE-2025-26461 · Published 2025-09-05 · Updated 2025-09-05

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Permission Manager (affected versions not specified)

Description In Permission Manager, the microphone privacy indicator may remain activated even after a user attempts to close the application. This is due to a logic error in the code and could potentially lead to local escalation of privilege without requiring additional execution privileges or user interaction.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-703

Related Identifiers

CVE-2025-26461

Affected Products

Permission Manager

References · 4

• https://source.android.com/security/bulletin/android-16 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-26461 · Security Note
• https://osv.dev/vulnerability/CVE-2025-26461 · Vendor Advisory
• https://twitter.com/CVEnew/status/1964008847569191133 · Twitter Post