CVE-2025-26417

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-26417
In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible bypass of user consent when opening files in shared storage due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

4.0 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.5 / Impact : 1.4

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/ed764e06106adef1cff5178c6df038fd054e7bec Product
https://source.android.com/security/bulletin/2025-03-01 Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*
cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*
History

02 Sep 2025, 17:59

Type Values Removed Values Added
CPE cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*
cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*
First Time Google
Google android
References () https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/ed764e06106adef1cff5178c6df038fd054e7bec - () https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/ed764e06106adef1cff5178c6df038fd054e7bec - Product
References () https://source.android.com/security/bulletin/2025-03-01 - () https://source.android.com/security/bulletin/2025-03-01 - Vendor Advisory

27 Aug 2025, 15:15

Type Values Removed Values Added
CWE CWE-610
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 4.0
Summary
  • (es) En checkWhetherCallingAppHasAccess de DownloadProvider.java, existe la posibilidad de omitir el consentimiento del usuario al abrir archivos en almacenamiento compartido debido a un proxy confuso. Esto podría provocar la divulgación de información local sin necesidad de privilegios de ejecución adicionales. No se requiere la interacción del usuario para su explotación.

26 Aug 2025, 23:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-08-26 23:15

Updated : 2025-09-02 17:59

NVD link : CVE-2025-26417

Mitre link : CVE-2025-26417

CVE.ORG link : CVE-2025-26417

JSON object : View

Products Affected

google

  • android
CWE
CWE-610

Externally Controlled Reference to a Resource in Another Sphere