CVE-2025-48586

In onActivityResult of EditFdnContactScreen.java, there is a possible way to leak contacts from the work profile due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48586

In onActivityResult of EditFdnContactScreen.java, there is a possible way to leak contacts from the work profile due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48586

In onActivityResult of EditFdnContactScreen.java, there is a possible way to leak contacts from the work profile due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from the American company Google. A security vulnerability exists in Google Android that stems from an obfuscated proxy issue in the EditFdnContactScreen file, which could lead to local elevation of privilege...

PT-2025-43475

Name of the Vulnerable Software and Affected Versions versions prior to 2025-48586 Description A flaw exists in the handling of onActivityResult within EditFdnContactScreen.java that may allow for the leakage of contacts from the work profile. This issue is due to a confused deputy condition and...