{"id":"ASB-A-337784859","details":"In onActivityResult of EditFdnContactScreen.java, there is a possible way to leak contacts from the work profile due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-337784859","CVE-2025-48586"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2025-12-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2025-12-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/services/Telephony/+/851fc787e96189a37f88cb9eaa688087883357c3"}],"affected":[{"package":{"name":"platform/packages/services/Telephony","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2-next:0"},{"fixed":"16-qpr2-next:2025-12-01"}]}],"versions":["16-qpr2-next"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/packages/services/Telephony/+/522822360789507788c90c9e37edb7f1095ae5ab","target":{"function":"onActivityResult","file":"src/com/android/phone/settings/fdn/EditFdnContactScreen.java"},"deprecated":false,"digest":{"length":1265,"function_hash":"44574680322157454752848350977507837003"},"id":"ASB-A-337784859-62b0ef7c","signature_type":"Function","signature_version":"v1"},{"source":"https://android.googlesource.com/platform/packages/services/Telephony/+/522822360789507788c90c9e37edb7f1095ae5ab","target":{"file":"src/com/android/phone/settings/fdn/EditFdnContactScreen.java"},"deprecated":false,"digest":{"line_hashes":["123261136241999965513210351823208176166","49705304075215450605396854346166440771","213881092258625730082151862532201975015","218242897059990671454278526196153212823","11266606767087888189234050523246691573","286276710405708818168144970905638903572","100041008446260560396476630504279122632","105167808509607679990927063527713333446","168328125234934026217668827358266626232","185917097445084625197258070703325947211","3187791055354639357838154546818177687","288216110125745294365115145838564677832","316583640584570170599124355357369825798","153025769674928185961134207302288593514","163569431729287378265648842546720560581","83299564588744835090190008928085844521","109876637182729561191650671647251910012","190840248804210687427189770524413441539","16509948692697771112421212207241914987","279878483952055589000241758145507912490","87652893955233724795722063442304114487","165994958050355283429715930404473453057","320358791728828252706872023392660181570","187039585454698388642327148219725122115","131586426463910042619529289310515958966","61687361217471626647191079485825923637","127943085276949128836191264373888920966","218128379598308445761871188442282494456","262079525052596149439399227600697859744"],"threshold":0.9},"id":"ASB-A-337784859-af1b07ef","signature_type":"Line","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/packages/services/Telephony/+/522822360789507788c90c9e37edb7f1095ae5ab"],"severity":"High","spl":"2025-12-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-337784859.json"}},{"package":{"name":"platform/packages/services/Telephony","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2025-12-01"}]}],"versions":["15"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/services/Telephony/+/ff3b9d46b90706133ea6d5afe8f2d4a1ecb418d0","target":{"file":"src/com/android/phone/settings/fdn/EditFdnContactScreen.java"},"deprecated":false,"digest":{"line_hashes":["123261136241999965513210351823208176166","49705304075215450605396854346166440771","213881092258625730082151862532201975015","218242897059990671454278526196153212823","11266606767087888189234050523246691573","286276710405708818168144970905638903572","100041008446260560396476630504279122632","105167808509607679990927063527713333446","168328125234934026217668827358266626232","185917097445084625197258070703325947211","3187791055354639357838154546818177687","288216110125745294365115145838564677832","316583640584570170599124355357369825798","153025769674928185961134207302288593514","163569431729287378265648842546720560581","83299564588744835090190008928085844521","109876637182729561191650671647251910012","190840248804210687427189770524413441539","16509948692697771112421212207241914987","279878483952055589000241758145507912490","87652893955233724795722063442304114487","165994958050355283429715930404473453057","320358791728828252706872023392660181570","187039585454698388642327148219725122115","131586426463910042619529289310515958966","61687361217471626647191079485825923637","127943085276949128836191264373888920966","218128379598308445761871188442282494456","262079525052596149439399227600697859744"],"threshold":0.9},"id":"ASB-A-337784859-5fcafec0","signature_type":"Line"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/services/Telephony/+/ff3b9d46b90706133ea6d5afe8f2d4a1ecb418d0","target":{"file":"src/com/android/phone/settings/fdn/EditFdnContactScreen.java","function":"onActivityResult"},"deprecated":false,"digest":{"function_hash":"44574680322157454752848350977507837003","length":1265},"id":"ASB-A-337784859-ab6cf713","signature_type":"Function"}],"fixes":["https://android.googlesource.com/platform/packages/services/Telephony/+/ff3b9d46b90706133ea6d5afe8f2d4a1ecb418d0"],"severity":"High","spl":"2025-12-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-337784859.json"}},{"package":{"name":"platform/packages/services/Telephony","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2025-12-01"}]}],"versions":["16"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/services/Telephony/+/a727dc2d556d7bddb66cb289b2658cc73dba789f"],"severity":"High","spl":"2025-12-01","types":["EoP"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/packages/services/Telephony/+/a727dc2d556d7bddb66cb289b2658cc73dba789f","target":{"file":"src/com/android/phone/settings/fdn/EditFdnContactScreen.java"},"deprecated":false,"digest":{"line_hashes":["123261136241999965513210351823208176166","49705304075215450605396854346166440771","213881092258625730082151862532201975015","218242897059990671454278526196153212823","11266606767087888189234050523246691573","286276710405708818168144970905638903572","100041008446260560396476630504279122632","105167808509607679990927063527713333446","168328125234934026217668827358266626232","185917097445084625197258070703325947211","3187791055354639357838154546818177687","288216110125745294365115145838564677832","316583640584570170599124355357369825798","153025769674928185961134207302288593514","163569431729287378265648842546720560581","83299564588744835090190008928085844521","109876637182729561191650671647251910012","190840248804210687427189770524413441539","16509948692697771112421212207241914987","279878483952055589000241758145507912490","87652893955233724795722063442304114487","165994958050355283429715930404473453057","320358791728828252706872023392660181570","187039585454698388642327148219725122115","131586426463910042619529289310515958966","61687361217471626647191079485825923637","127943085276949128836191264373888920966","218128379598308445761871188442282494456","262079525052596149439399227600697859744"],"threshold":0.9},"id":"ASB-A-337784859-c4b93e65","signature_type":"Line","signature_version":"v1"},{"source":"https://android.googlesource.com/platform/packages/services/Telephony/+/a727dc2d556d7bddb66cb289b2658cc73dba789f","target":{"file":"src/com/android/phone/settings/fdn/EditFdnContactScreen.java","function":"onActivityResult"},"deprecated":false,"digest":{"length":1265,"function_hash":"44574680322157454752848350977507837003"},"id":"ASB-A-337784859-cdc23cb3","signature_type":"Function","signature_version":"v1"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-337784859.json"}}],"schema_version":"1.9.0"}