{"id":"ASB-A-388828859","details":"In offerNetwork of ConnectivityService.java, there is a possible leak of sensitive data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-388828859","CVE-2025-26445"],"modified":"2026-04-17T15:55:28.020024Z","published":"2025-06-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2025-06-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/modules/Connectivity/+/0eccf35b6b1b123996ee41e4cc078cf79c35be89"}],"affected":[{"package":{"name":"platform/packages/modules/Connectivity","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-next:0"},{"fixed":"16-next:2025-06-01"}]}],"versions":["16-next"],"ecosystem_specific":{"severity":"High","fixes":["https://android.googlesource.com/platform/packages/modules/Connectivity/+/2bde2fe348a9861786ff4cbda8e46e9ffca26bf7"],"vanir_signatures":[{"target":{"file":"service/src/com/android/server/ConnectivityService.java"},"signature_type":"Line","digest":{"line_hashes":["262396038357104497907984848060117163787","54130136488940096754733008694694426325","9852743213078760651811842745914440046","61620647746723102817967400451463051865"],"threshold":0.9},"deprecated":false,"id":"ASB-A-388828859-71d4d8a8","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Connectivity/+/2bde2fe348a9861786ff4cbda8e46e9ffca26bf7"},{"target":{"function":"offerNetwork","file":"service/src/com/android/server/ConnectivityService.java"},"signature_type":"Function","digest":{"length":489,"function_hash":"126951957245545320111530138522786059857"},"deprecated":false,"id":"ASB-A-388828859-a3910417","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Connectivity/+/2bde2fe348a9861786ff4cbda8e46e9ffca26bf7"}],"spl":"2025-06-01","types":["ID"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-388828859.json"}},{"package":{"name":"platform/packages/modules/Connectivity","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2025-06-01"}]}],"versions":["15"],"ecosystem_specific":{"severity":"High","fixes":["https://android.googlesource.com/platform/packages/modules/Connectivity/+/2bde2fe348a9861786ff4cbda8e46e9ffca26bf7"],"vanir_signatures":[{"target":{"file":"service/src/com/android/server/ConnectivityService.java"},"signature_type":"Line","digest":{"line_hashes":["262396038357104497907984848060117163787","54130136488940096754733008694694426325","9852743213078760651811842745914440046","61620647746723102817967400451463051865"],"threshold":0.9},"deprecated":false,"id":"ASB-A-388828859-1a0e4e98","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Connectivity/+/2bde2fe348a9861786ff4cbda8e46e9ffca26bf7"},{"target":{"function":"offerNetwork","file":"service/src/com/android/server/ConnectivityService.java"},"signature_type":"Function","digest":{"length":489,"function_hash":"126951957245545320111530138522786059857"},"deprecated":false,"id":"ASB-A-388828859-48eec298","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Connectivity/+/2bde2fe348a9861786ff4cbda8e46e9ffca26bf7"}],"spl":"2025-06-01","types":["ID"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-388828859.json"}},{"package":{"name":"platform/packages/modules/Connectivity","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2025-06-01"}]}],"versions":["13"],"ecosystem_specific":{"severity":"High","fixes":["https://android.googlesource.com/platform/packages/modules/Connectivity/+/f27bca2d7d236008f46e8c67154d7c2118a9fbf5"],"vanir_signatures":[{"target":{"function":"offerNetwork","file":"service/src/com/android/server/ConnectivityService.java"},"signature_type":"Function","digest":{"length":489,"function_hash":"126951957245545320111530138522786059857"},"deprecated":false,"id":"ASB-A-388828859-15e2a349","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Connectivity/+/f27bca2d7d236008f46e8c67154d7c2118a9fbf5"},{"target":{"file":"service/src/com/android/server/ConnectivityService.java"},"signature_type":"Line","digest":{"line_hashes":["262396038357104497907984848060117163787","54130136488940096754733008694694426325","9852743213078760651811842745914440046","61620647746723102817967400451463051865"],"threshold":0.9},"deprecated":false,"id":"ASB-A-388828859-eb5f997e","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Connectivity/+/f27bca2d7d236008f46e8c67154d7c2118a9fbf5"}],"spl":"2025-06-01","types":["ID"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-388828859.json"}},{"package":{"name":"platform/packages/modules/Connectivity","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2025-06-01"}]}],"versions":["14"],"ecosystem_specific":{"severity":"High","fixes":["https://android.googlesource.com/platform/packages/modules/Connectivity/+/27b011caf2edb02e550e1f8aa2eae3e2066d27b3"],"vanir_signatures":[{"target":{"file":"service/src/com/android/server/ConnectivityService.java"},"signature_type":"Line","digest":{"line_hashes":["262396038357104497907984848060117163787","54130136488940096754733008694694426325","9852743213078760651811842745914440046","61620647746723102817967400451463051865"],"threshold":0.9},"deprecated":false,"id":"ASB-A-388828859-17003266","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Connectivity/+/27b011caf2edb02e550e1f8aa2eae3e2066d27b3"},{"target":{"function":"offerNetwork","file":"service/src/com/android/server/ConnectivityService.java"},"signature_type":"Function","digest":{"length":489,"function_hash":"126951957245545320111530138522786059857"},"deprecated":false,"id":"ASB-A-388828859-9713238c","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Connectivity/+/27b011caf2edb02e550e1f8aa2eae3e2066d27b3"}],"spl":"2025-06-01","types":["ID"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-388828859.json"}}],"schema_version":"1.7.5"}