PT-2025-4181 · Google · Android 12+2

Published 2025-02-04 · Updated 2025-02-04 · CVE-2025-20899

Positive Technologies (AI Summary)

CVSS v3.1

4.0

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions PushNotification versions prior to 13.0.00.15 in Android 12 PushNotification versions prior to 14.0.00.7 in Android 13 PushNotification versions prior to 15.1.00.5 in Android 14

Description The issue is related to improper access control in PushNotification, allowing local attackers to access sensitive information.

Recommendations For PushNotification version prior to 13.0.00.15 in Android 12, update to version 13.0.00.15 or later. For PushNotification version prior to 14.0.00.7 in Android 13, update to version 14.0.00.7 or later. For PushNotification version prior to 15.1.00.5 in Android 14, update to version 15.1.00.5 or later.

Fix

Related Identifiers

CVE-2025-20899

Affected Products

Android 12

Android 13

Android 14

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-20899 · Security Note
• https://t.me/cvedetector/17167 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1886725627614502953 · Twitter Post
• https://twitter.com/CVEnew/status/1886680222927589726 · Twitter Post
• https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=01 · Note