CVE-2025-0082: Medium severity Google Android vulnerability
In multiple functions of StatusHint.java and TelecomServiceImpl.java, there is a possible way to reveal images across users due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-0082?
CVE-2025-0082 has a severity rating of medium due to potential local information disclosure.
How do I fix CVE-2025-0082?
To fix CVE-2025-0082, update your Android device to the latest available version that addresses the vulnerability.
What is affected by CVE-2025-0082?
CVE-2025-0082 affects multiple versions of Google Android, specifically versions 12.0, 12.1, 13.0, 14.0, and 15.0.
Is user interaction needed to exploit CVE-2025-0082?
Yes, user interaction is necessary for the exploitation of CVE-2025-0082.
What type of information is disclosed in CVE-2025-0082?
CVE-2025-0082 allows for the possible disclosure of images across users.