{"id":"ASB-A-388528350","details":"In onStart of BiometricEnrollIntroduction.java, there is a possible way to determine the device's location due to an unsafe PendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.","aliases":["A-388528350","CVE-2025-32347"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2025-09-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2025-09-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/apps/Settings/+/d50de07930ee2dc3f896d8932be3dbeb9c25b939"}],"affected":[{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-next:0"},{"fixed":"16-next:2025-09-01"}]}],"versions":["16-next"],"ecosystem_specific":{"severity":"High","spl":"2025-09-01","types":["EoP"],"vanir_signatures":[{"digest":{"threshold":0.9,"line_hashes":["321552020423724963430102315176576474173","315063177975038202939105563201790514533","66359847175346602737210161383359809719","248639499660196502193965983358244695219","60934286536770553773935080717629505595","294044000568240924128836564086809215616","136213195857382010431644666774537399576","131425012677895900634075701018795598123","27765541124398137529764707831781443323","17528273657218012563607544064370315864","300857873024173526057780740524530921912","78175845690829680004694913992119905423","80664757291765886186206793194030193454","214382559747833153964736340160161217228","121177577434766770049090914646148144315","194728335853198814081158676298429182953","37097152100573281578432124542882193487","40540024082895131155180839736311077173"]},"id":"ASB-A-388528350-a4424c7d","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/4ccdeee849d5fef78498ba33cadc525523efcbd7","target":{"file":"src/com/android/settings/biometrics/BiometricEnrollIntroduction.java"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/4ccdeee849d5fef78498ba33cadc525523efcbd7"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-388528350.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2025-09-01"}]}],"versions":["15"],"ecosystem_specific":{"vanir_signatures":[{"id":"ASB-A-388528350-8b0b434a","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/638757a3001417a211ba3b72ffc43b6c751437b1","target":{"file":"src/com/android/settings/biometrics/BiometricEnrollIntroduction.java"},"deprecated":false,"digest":{"line_hashes":["321552020423724963430102315176576474173","315063177975038202939105563201790514533","66359847175346602737210161383359809719","248639499660196502193965983358244695219","60934286536770553773935080717629505595","294044000568240924128836564086809215616","136213195857382010431644666774537399576","131425012677895900634075701018795598123","27765541124398137529764707831781443323","17528273657218012563607544064370315864","300857873024173526057780740524530921912","78175845690829680004694913992119905423","80664757291765886186206793194030193454","214382559747833153964736340160161217228","121177577434766770049090914646148144315","194728335853198814081158676298429182953","37097152100573281578432124542882193487","40540024082895131155180839736311077173"],"threshold":0.9}}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/638757a3001417a211ba3b72ffc43b6c751437b1"],"severity":"High","spl":"2025-09-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-388528350.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2025-09-01"}]}],"versions":["16"],"ecosystem_specific":{"severity":"High","spl":"2025-09-01","types":["EoP"],"vanir_signatures":[{"id":"ASB-A-388528350-5793f6bf","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/9dd5ed1cea0449812775fb76a46f8be2e6862425","target":{"file":"src/com/android/settings/biometrics/BiometricEnrollIntroduction.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["321552020423724963430102315176576474173","315063177975038202939105563201790514533","66359847175346602737210161383359809719","248639499660196502193965983358244695219","60934286536770553773935080717629505595","294044000568240924128836564086809215616","136213195857382010431644666774537399576","131425012677895900634075701018795598123","27765541124398137529764707831781443323","17528273657218012563607544064370315864","300857873024173526057780740524530921912","78175845690829680004694913992119905423","80664757291765886186206793194030193454","214382559747833153964736340160161217228","121177577434766770049090914646148144315","194728335853198814081158676298429182953","37097152100573281578432124542882193487","40540024082895131155180839736311077173"]}}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/9dd5ed1cea0449812775fb76a46f8be2e6862425"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-388528350.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2025-09-01"}]}],"versions":["13"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/6da8a2b6b85ca806531f6d20e511e4cd171197c4","target":{"file":"src/com/android/settings/biometrics/BiometricEnrollIntroduction.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["321552020423724963430102315176576474173","315063177975038202939105563201790514533","66359847175346602737210161383359809719","296685852313678411056972883291578897176","197806886388363117596950926085129439530","294044000568240924128836564086809215616","126899702032076627595970058608695870112"]},"id":"ASB-A-388528350-54ada7c2","signature_type":"Line","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/6da8a2b6b85ca806531f6d20e511e4cd171197c4"],"severity":"High","spl":"2025-09-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-388528350.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2025-09-01"}]}],"versions":["14"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/f6a58a3646598c4ce7f01b9c6c3e828877891e87"],"severity":"High","spl":"2025-09-01","types":["EoP"],"vanir_signatures":[{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["321552020423724963430102315176576474173","315063177975038202939105563201790514533","66359847175346602737210161383359809719","296685852313678411056972883291578897176","197806886388363117596950926085129439530","294044000568240924128836564086809215616","126899702032076627595970058608695870112","131425012677895900634075701018795598123","27765541124398137529764707831781443323","17528273657218012563607544064370315864","300857873024173526057780740524530921912","78175845690829680004694913992119905423","80664757291765886186206793194030193454","214382559747833153964736340160161217228","121177577434766770049090914646148144315","194728335853198814081158676298429182953","37097152100573281578432124542882193487","40540024082895131155180839736311077173"]},"id":"ASB-A-388528350-c96924ae","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/f6a58a3646598c4ce7f01b9c6c3e828877891e87","target":{"file":"src/com/android/settings/biometrics/BiometricEnrollIntroduction.java"}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-388528350.json"}}],"schema_version":"1.9.0"}