{"id":"ASB-A-305710989","details":"In multiple locations, there is a possible way to read files from another user due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-305710989","CVE-2025-48604"],"modified":"2026-05-19T16:54:37.272608834Z","published":"2025-12-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2025-12-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/services/Mms/+/c60a828b9fa18f67260775a46c752f353fcc0d43"}],"affected":[{"package":{"name":"platform/packages/services/Mms","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2-next:0"},{"fixed":"16-qpr2-next:2025-12-01"}]}],"versions":["16-qpr2-next"],"ecosystem_specific":{"severity":"High","spl":"2025-12-01","types":["ID"],"vanir_signatures":[{"target":{"file":"src/com/android/mms/service/MmsService.java","function":"writePduToContentUri"},"source":"https://android.googlesource.com/platform/packages/services/Mms/+/0b8c94aa0a37c83d03f6c442c8d111fe8f49bbac","signature_version":"v1","digest":{"length":1003,"function_hash":"275745261686135935980908476896948263577"},"deprecated":false,"id":"ASB-A-305710989-2c7addc2","signature_type":"Function"},{"signature_type":"Line","source":"https://android.googlesource.com/platform/packages/services/Mms/+/0b8c94aa0a37c83d03f6c442c8d111fe8f49bbac","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["60120558583932501315592848821714907875","155404683051889803650849691983762447816","125340111724790192037784919650722663493","55356249250784118293275964716332904649","104055590352399984203045585003691238905","39053956087200974338638523925615942953","226063554008217350318244628602580163148","185403641265886757349043619166930843103","323759534006544161932777523168961198155","274765871379649737914849938782266903320","92510606722320008626496340272139944959","317419915406133658487809506207437673323"]},"deprecated":false,"id":"ASB-A-305710989-3e4d0609","target":{"file":"src/com/android/mms/service/MmsService.java"}},{"signature_type":"Line","source":"https://android.googlesource.com/platform/packages/services/Mms/+/0b8c94aa0a37c83d03f6c442c8d111fe8f49bbac","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["242219402647729238502980058986287319280","147791069043761527274924743221522601694","106190327178936603262636237697936389490","165666751650439715948375068125202699112","203135259857874745770500395310889264584","276373080477785055609196109899019923016","156703147780933996135860709928764115886","305886423109541646352080166336576054601","159421756380555111544658298868048946313","336506438036152906926621812608965860923","172641615680431228239340712219673271156","215924667855646535299914628112485589137","19500615365740582381662426346702055794","66378209549746310570722038109360726670"]},"deprecated":false,"id":"ASB-A-305710989-4438573a","target":{"file":"src/com/android/mms/service/DownloadRequest.java"}},{"target":{"file":"src/com/android/mms/service/MmsService.java","function":"downloadMessage"},"source":"https://android.googlesource.com/platform/packages/services/Mms/+/0b8c94aa0a37c83d03f6c442c8d111fe8f49bbac","signature_version":"v1","digest":{"length":2230,"function_hash":"216052344530283643434890836570539302572"},"deprecated":false,"id":"ASB-A-305710989-4f00c942","signature_type":"Function"},{"signature_type":"Line","source":"https://android.googlesource.com/platform/packages/services/Mms/+/0b8c94aa0a37c83d03f6c442c8d111fe8f49bbac","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["298926404034321525593693902307339273911","235461626068140338304846413500431985728","276321038560159966645955360166825734193","163365049768395309941544272984952386782"]},"deprecated":false,"id":"ASB-A-305710989-77db9803","target":{"file":"src/com/android/mms/service/MmsRequest.java"}},{"signature_type":"Function","source":"https://android.googlesource.com/platform/packages/services/Mms/+/0b8c94aa0a37c83d03f6c442c8d111fe8f49bbac","signature_version":"v1","digest":{"length":114,"function_hash":"72483541520626523506149712796859787199"},"deprecated":false,"id":"ASB-A-305710989-a32b1e50","target":{"file":"src/com/android/mms/service/DownloadRequest.java","function":"transferResponse"}},{"signature_type":"Function","source":"https://android.googlesource.com/platform/packages/services/Mms/+/0b8c94aa0a37c83d03f6c442c8d111fe8f49bbac","signature_version":"v1","digest":{"length":315,"function_hash":"80034780403587610234008728669611325682"},"deprecated":false,"id":"ASB-A-305710989-e324895e","target":{"file":"src/com/android/mms/service/DownloadRequest.java","function":"DownloadRequest"}}],"fixes":["https://android.googlesource.com/platform/packages/services/Mms/+/0b8c94aa0a37c83d03f6c442c8d111fe8f49bbac"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-305710989.json"}},{"package":{"name":"platform/packages/services/Mms","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2025-12-01"}]}],"versions":["15"],"ecosystem_specific":{"severity":"High","spl":"2025-12-01","types":["ID"],"vanir_signatures":[{"signature_type":"Line","source":"https://android.googlesource.com/platform/packages/services/Mms/+/63f54920d620540fccde4ce5539668ec18533728","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["298926404034321525593693902307339273911","235461626068140338304846413500431985728","276321038560159966645955360166825734193","163365049768395309941544272984952386782"]},"deprecated":false,"id":"ASB-A-305710989-48945752","target":{"file":"src/com/android/mms/service/MmsRequest.java"}},{"signature_type":"Function","source":"https://android.googlesource.com/platform/packages/services/Mms/+/63f54920d620540fccde4ce5539668ec18533728","signature_version":"v1","digest":{"length":2230,"function_hash":"216052344530283643434890836570539302572"},"deprecated":false,"id":"ASB-A-305710989-5ef10673","target":{"file":"src/com/android/mms/service/MmsService.java","function":"downloadMessage"}},{"signature_type":"Function","source":"https://android.googlesource.com/platform/packages/services/Mms/+/63f54920d620540fccde4ce5539668ec18533728","signature_version":"v1","digest":{"length":315,"function_hash":"80034780403587610234008728669611325682"},"deprecated":false,"id":"ASB-A-305710989-82c9a05a","target":{"file":"src/com/android/mms/service/DownloadRequest.java","function":"DownloadRequest"}},{"signature_type":"Function","source":"https://android.googlesource.com/platform/packages/services/Mms/+/63f54920d620540fccde4ce5539668ec18533728","signature_version":"v1","digest":{"length":114,"function_hash":"72483541520626523506149712796859787199"},"deprecated":false,"id":"ASB-A-305710989-9479470b","target":{"file":"src/com/android/mms/service/DownloadRequest.java","function":"transferResponse"}},{"signature_type":"Line","source":"https://android.googlesource.com/platform/packages/services/Mms/+/63f54920d620540fccde4ce5539668ec18533728","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["60120558583932501315592848821714907875","155404683051889803650849691983762447816","125340111724790192037784919650722663493","55356249250784118293275964716332904649","104055590352399984203045585003691238905","39053956087200974338638523925615942953","226063554008217350318244628602580163148","185403641265886757349043619166930843103","323759534006544161932777523168961198155","274765871379649737914849938782266903320","92510606722320008626496340272139944959","317419915406133658487809506207437673323"]},"deprecated":false,"id":"ASB-A-305710989-a389ae75","target":{"file":"src/com/android/mms/service/MmsService.java"}},{"signature_type":"Line","source":"https://android.googlesource.com/platform/packages/services/Mms/+/63f54920d620540fccde4ce5539668ec18533728","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["242219402647729238502980058986287319280","147791069043761527274924743221522601694","106190327178936603262636237697936389490","165666751650439715948375068125202699112","203135259857874745770500395310889264584","276373080477785055609196109899019923016","156703147780933996135860709928764115886","305886423109541646352080166336576054601","159421756380555111544658298868048946313","336506438036152906926621812608965860923","172641615680431228239340712219673271156","215924667855646535299914628112485589137","19500615365740582381662426346702055794","66378209549746310570722038109360726670"]},"deprecated":false,"id":"ASB-A-305710989-c3a21a94","target":{"file":"src/com/android/mms/service/DownloadRequest.java"}},{"target":{"file":"src/com/android/mms/service/MmsService.java","function":"writePduToContentUri"},"source":"https://android.googlesource.com/platform/packages/services/Mms/+/63f54920d620540fccde4ce5539668ec18533728","signature_version":"v1","digest":{"length":1003,"function_hash":"275745261686135935980908476896948263577"},"deprecated":false,"id":"ASB-A-305710989-d916f616","signature_type":"Function"}],"fixes":["https://android.googlesource.com/platform/packages/services/Mms/+/63f54920d620540fccde4ce5539668ec18533728"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-305710989.json"}},{"package":{"name":"platform/packages/services/Mms","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2025-12-01"}]}],"versions":["16"],"ecosystem_specific":{"severity":"High","spl":"2025-12-01","types":["ID"],"vanir_signatures":[{"signature_type":"Function","source":"https://android.googlesource.com/platform/packages/services/Mms/+/efda719b961b01ef63054670ec4ab308dae15bdf","signature_version":"v1","digest":{"length":2230,"function_hash":"216052344530283643434890836570539302572"},"deprecated":false,"id":"ASB-A-305710989-303ecb88","target":{"file":"src/com/android/mms/service/MmsService.java","function":"downloadMessage"}},{"signature_type":"Function","source":"https://android.googlesource.com/platform/packages/services/Mms/+/efda719b961b01ef63054670ec4ab308dae15bdf","signature_version":"v1","digest":{"length":315,"function_hash":"80034780403587610234008728669611325682"},"deprecated":false,"id":"ASB-A-305710989-3ff957ca","target":{"file":"src/com/android/mms/service/DownloadRequest.java","function":"DownloadRequest"}},{"signature_type":"Line","source":"https://android.googlesource.com/platform/packages/services/Mms/+/efda719b961b01ef63054670ec4ab308dae15bdf","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["298926404034321525593693902307339273911","235461626068140338304846413500431985728","276321038560159966645955360166825734193","163365049768395309941544272984952386782"]},"deprecated":false,"id":"ASB-A-305710989-4d9ad241","target":{"file":"src/com/android/mms/service/MmsRequest.java"}},{"signature_type":"Function","source":"https://android.googlesource.com/platform/packages/services/Mms/+/efda719b961b01ef63054670ec4ab308dae15bdf","signature_version":"v1","digest":{"length":114,"function_hash":"72483541520626523506149712796859787199"},"deprecated":false,"id":"ASB-A-305710989-6bb5f270","target":{"file":"src/com/android/mms/service/DownloadRequest.java","function":"transferResponse"}},{"target":{"file":"src/com/android/mms/service/MmsService.java"},"source":"https://android.googlesource.com/platform/packages/services/Mms/+/efda719b961b01ef63054670ec4ab308dae15bdf","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["60120558583932501315592848821714907875","155404683051889803650849691983762447816","125340111724790192037784919650722663493","55356249250784118293275964716332904649","104055590352399984203045585003691238905","39053956087200974338638523925615942953","226063554008217350318244628602580163148","185403641265886757349043619166930843103","323759534006544161932777523168961198155","274765871379649737914849938782266903320","92510606722320008626496340272139944959","317419915406133658487809506207437673323"]},"deprecated":false,"id":"ASB-A-305710989-8a8de7a1","signature_type":"Line"},{"target":{"file":"src/com/android/mms/service/DownloadRequest.java"},"source":"https://android.googlesource.com/platform/packages/services/Mms/+/efda719b961b01ef63054670ec4ab308dae15bdf","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["242219402647729238502980058986287319280","147791069043761527274924743221522601694","106190327178936603262636237697936389490","165666751650439715948375068125202699112","203135259857874745770500395310889264584","276373080477785055609196109899019923016","156703147780933996135860709928764115886","305886423109541646352080166336576054601","159421756380555111544658298868048946313","336506438036152906926621812608965860923","172641615680431228239340712219673271156","215924667855646535299914628112485589137","19500615365740582381662426346702055794","66378209549746310570722038109360726670"]},"deprecated":false,"id":"ASB-A-305710989-c2ad124a","signature_type":"Line"},{"target":{"file":"src/com/android/mms/service/MmsService.java","function":"writePduToContentUri"},"source":"https://android.googlesource.com/platform/packages/services/Mms/+/efda719b961b01ef63054670ec4ab308dae15bdf","signature_version":"v1","digest":{"length":1003,"function_hash":"275745261686135935980908476896948263577"},"deprecated":false,"id":"ASB-A-305710989-ed0c3dcb","signature_type":"Function"}],"fixes":["https://android.googlesource.com/platform/packages/services/Mms/+/efda719b961b01ef63054670ec4ab308dae15bdf"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-305710989.json"}},{"package":{"name":"platform/packages/services/Mms","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2025-12-01"}]}],"versions":["13"],"ecosystem_specific":{"severity":"High","spl":"2025-12-01","types":["ID"],"vanir_signatures":[{"target":{"file":"src/com/android/mms/service/MmsRequest.java"},"source":"https://android.googlesource.com/platform/packages/services/Mms/+/89ee22ab5d7b9a66d3eb48a21f21610484dae290","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["298926404034321525593693902307339273911","235461626068140338304846413500431985728","276321038560159966645955360166825734193","163365049768395309941544272984952386782"]},"deprecated":false,"id":"ASB-A-305710989-0aeb5590","signature_type":"Line"},{"target":{"file":"src/com/android/mms/service/DownloadRequest.java","function":"transferResponse"},"source":"https://android.googlesource.com/platform/packages/services/Mms/+/89ee22ab5d7b9a66d3eb48a21f21610484dae290","signature_version":"v1","digest":{"length":114,"function_hash":"72483541520626523506149712796859787199"},"deprecated":false,"id":"ASB-A-305710989-12f48796","signature_type":"Function"},{"target":{"file":"src/com/android/mms/service/MmsService.java","function":"downloadMessage"},"source":"https://android.googlesource.com/platform/packages/services/Mms/+/89ee22ab5d7b9a66d3eb48a21f21610484dae290","signature_version":"v1","digest":{"length":1936,"function_hash":"159973842497947681771408392025550624669"},"deprecated":false,"id":"ASB-A-305710989-86067e82","signature_type":"Function"},{"signature_type":"Function","source":"https://android.googlesource.com/platform/packages/services/Mms/+/89ee22ab5d7b9a66d3eb48a21f21610484dae290","signature_version":"v1","digest":{"length":271,"function_hash":"49741924223418066586126455673669404248"},"deprecated":false,"id":"ASB-A-305710989-94864c7a","target":{"file":"src/com/android/mms/service/DownloadRequest.java","function":"DownloadRequest"}},{"target":{"file":"src/com/android/mms/service/DownloadRequest.java"},"source":"https://android.googlesource.com/platform/packages/services/Mms/+/89ee22ab5d7b9a66d3eb48a21f21610484dae290","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["242219402647729238502980058986287319280","147791069043761527274924743221522601694","106190327178936603262636237697936389490","281488805198211503055061831286408733908","113310906926455050430552344347680310886","157922217397034013225085206785415530008","15744874512267930654385021722499792903","34159770773278447314153490026756322622","305886423109541646352080166336576054601","159421756380555111544658298868048946313","336506438036152906926621812608965860923","172641615680431228239340712219673271156","215924667855646535299914628112485589137","19500615365740582381662426346702055794","66378209549746310570722038109360726670"]},"deprecated":false,"id":"ASB-A-305710989-a6b7c6f5","signature_type":"Line"},{"signature_type":"Line","source":"https://android.googlesource.com/platform/packages/services/Mms/+/89ee22ab5d7b9a66d3eb48a21f21610484dae290","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["60120558583932501315592848821714907875","220998804226169428558260876928383390163","189209958330942258454768625678812436648","26815144203986540793087170849540303490","11868217836058289763407672054496291554","39053956087200974338638523925615942953","226063554008217350318244628602580163148","185403641265886757349043619166930843103","323759534006544161932777523168961198155","274765871379649737914849938782266903320","92510606722320008626496340272139944959","317419915406133658487809506207437673323"]},"deprecated":false,"id":"ASB-A-305710989-d8883d7d","target":{"file":"src/com/android/mms/service/MmsService.java"}},{"signature_type":"Function","source":"https://android.googlesource.com/platform/packages/services/Mms/+/89ee22ab5d7b9a66d3eb48a21f21610484dae290","signature_version":"v1","digest":{"length":1003,"function_hash":"275745261686135935980908476896948263577"},"deprecated":false,"id":"ASB-A-305710989-f9d6290b","target":{"file":"src/com/android/mms/service/MmsService.java","function":"writePduToContentUri"}}],"fixes":["https://android.googlesource.com/platform/packages/services/Mms/+/89ee22ab5d7b9a66d3eb48a21f21610484dae290"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-305710989.json"}},{"package":{"name":"platform/packages/services/Mms","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2025-12-01"}]}],"versions":["14"],"ecosystem_specific":{"severity":"High","spl":"2025-12-01","types":["ID"],"vanir_signatures":[{"target":{"file":"src/com/android/mms/service/MmsRequest.java"},"source":"https://android.googlesource.com/platform/packages/services/Mms/+/5af1973aeb4afc839854f2f4733ebdc59e87f95a","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["298926404034321525593693902307339273911","235461626068140338304846413500431985728","276321038560159966645955360166825734193","163365049768395309941544272984952386782"]},"deprecated":false,"id":"ASB-A-305710989-014c32ef","signature_type":"Line"},{"signature_type":"Line","source":"https://android.googlesource.com/platform/packages/services/Mms/+/5af1973aeb4afc839854f2f4733ebdc59e87f95a","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["242219402647729238502980058986287319280","147791069043761527274924743221522601694","106190327178936603262636237697936389490","167364592110446141299515496526206769656","250158518481756434438120405722680869258","65052507869498265920501187534453044878","333333081121696939437101739292334646212","213942738664712388429952331759517459257","305886423109541646352080166336576054601","159421756380555111544658298868048946313","336506438036152906926621812608965860923","172641615680431228239340712219673271156","215924667855646535299914628112485589137","19500615365740582381662426346702055794","66378209549746310570722038109360726670"]},"deprecated":false,"id":"ASB-A-305710989-0dce18d5","target":{"file":"src/com/android/mms/service/DownloadRequest.java"}},{"target":{"file":"src/com/android/mms/service/DownloadRequest.java","function":"DownloadRequest"},"source":"https://android.googlesource.com/platform/packages/services/Mms/+/5af1973aeb4afc839854f2f4733ebdc59e87f95a","signature_version":"v1","digest":{"length":293,"function_hash":"59958204528255364024613068026364083736"},"deprecated":false,"id":"ASB-A-305710989-2ffec536","signature_type":"Function"},{"target":{"file":"src/com/android/mms/service/MmsService.java","function":"downloadMessage"},"source":"https://android.googlesource.com/platform/packages/services/Mms/+/5af1973aeb4afc839854f2f4733ebdc59e87f95a","signature_version":"v1","digest":{"length":2209,"function_hash":"72060531108204601682266087161714649232"},"deprecated":false,"id":"ASB-A-305710989-970b2d68","signature_type":"Function"},{"signature_type":"Line","source":"https://android.googlesource.com/platform/packages/services/Mms/+/5af1973aeb4afc839854f2f4733ebdc59e87f95a","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["60120558583932501315592848821714907875","68190233132880696211445363448702670605","209180808212589440083697197881644086676","317098432476356993793163318345666489497","39053956087200974338638523925615942953","226063554008217350318244628602580163148","185403641265886757349043619166930843103","323759534006544161932777523168961198155","274765871379649737914849938782266903320","92510606722320008626496340272139944959","317419915406133658487809506207437673323"]},"deprecated":false,"id":"ASB-A-305710989-cd4d490a","target":{"file":"src/com/android/mms/service/MmsService.java"}},{"signature_type":"Function","source":"https://android.googlesource.com/platform/packages/services/Mms/+/5af1973aeb4afc839854f2f4733ebdc59e87f95a","signature_version":"v1","digest":{"length":114,"function_hash":"72483541520626523506149712796859787199"},"deprecated":false,"id":"ASB-A-305710989-fcc118e7","target":{"file":"src/com/android/mms/service/DownloadRequest.java","function":"transferResponse"}},{"signature_type":"Function","source":"https://android.googlesource.com/platform/packages/services/Mms/+/5af1973aeb4afc839854f2f4733ebdc59e87f95a","signature_version":"v1","digest":{"length":1003,"function_hash":"275745261686135935980908476896948263577"},"deprecated":false,"id":"ASB-A-305710989-fd882ec3","target":{"file":"src/com/android/mms/service/MmsService.java","function":"writePduToContentUri"}}],"fixes":["https://android.googlesource.com/platform/packages/services/Mms/+/5af1973aeb4afc839854f2f4733ebdc59e87f95a"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-305710989.json"}}],"schema_version":"1.7.5"}