ASB-A-442392902

In onStart of CompanionDeviceManagerService.java, there is a possible confused deputy due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-32347

In onStart of BiometricEnrollIntroduction.java, there is a possible way to determine the device's location due to an unsafe PendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2025-32347

The Google Android operating system is impacted by an elevation of privilege vulnerability (CVE-2025-32347) located in the onStart function of the BiometricEnrollIntroduction.java module. The root cause is an unsafe PendingIntent , which could allow an attacker to determine the device's location ...