CVE-2025-48586

In onActivityResult of EditFdnContactScreen.java, there is a possible way to leak contacts from the work profile due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48586

In onActivityResult of EditFdnContactScreen.java, there is a possible way to leak contacts from the work profile due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2025-43475

Name of the Vulnerable Software and Affected Versions versions prior to 2025-48586 Description A flaw exists in the handling of onActivityResult within EditFdnContactScreen.java that may allow for the leakage of contacts from the work profile. This issue is due to a confused deputy condition and...