EUVD-2025-27039

Malicious code in bioql PyPI...

The vulnerability of the updateState() function in the ContentProtectionTogglePreferenceController.java module of Android operating systems allows a hacker to enhance their privileges and execute arbitrary code.

The vulnerability of the updateState function in the ContentProtectionTogglePreferenceController.java module of Android operating systems is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary co...

CVE-2025-32345

In updateState of ContentProtectionTogglePreferenceController.java, there is a possible way for a secondary user to disable the primary user's deceptive app scanning setting due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges...

CVE-2025-26435

CVE-2025-26435 affects ContentProtectionTogglePreferenceController.java and is due to a logic error in updateState that could allow a secondary user to disable the primary user's app scanning setting, enabling local privilege escalation without additional privileges or user interaction. The entry...

ASB-A-409318132

In updateState of ContentProtectionTogglePreferenceController.java, there is a possible way for a secondary user to disable the primary user's deceptive app scanning setting due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges...