CVE-2025-32328: High severity Google Android vulnerability
In multiple functions of Session.java, there is a possible way to view images belonging to a different user of the device due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-32328?
CVE-2025-32328 has been classified as a local escalation of privilege vulnerability.
How do I fix CVE-2025-32328?
To address CVE-2025-32328, users should update their Android devices to the latest version where the vulnerability has been patched.
What versions of Android are affected by CVE-2025-32328?
CVE-2025-32328 affects Google Android versions 13.0, 14.0, and 15.0.
What could happen if CVE-2025-32328 is exploited?
Exploiting CVE-2025-32328 could allow an attacker to view images belonging to a different user, leading to a breach of user privacy.
Is user interaction required for CVE-2025-32328 exploitation?
No, CVE-2025-32328 can be exploited without any user interaction.