CVE-2025-32326: High severity Google Android vulnerability
In multiple functions of AppRestrictionsFragment.java, there is a possible way to bypass intent security check due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-32326?
CVE-2025-32326 is classified as a high-severity vulnerability due to its potential for local escalation of privilege.
How do I fix CVE-2025-32326?
To fix CVE-2025-32326, users should update their Android devices to the latest security patch provided by Google.
What versions of Android are affected by CVE-2025-32326?
CVE-2025-32326 affects Google Android versions 13.0, 14.0, 15.0, and 16.0.
Is user interaction required for exploitation of CVE-2025-32326?
Yes, exploitation of CVE-2025-32326 requires user interaction to bypass the intent security check.
What type of attack does CVE-2025-32326 represent?
CVE-2025-32326 represents a confused deputy attack which can lead to unauthorized privilege escalation.