{"id":"ASB-A-409318132","details":"In updateState of ContentProtectionTogglePreferenceController.java, there is a possible way for a secondary user to disable the primary user's deceptive app scanning setting due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-409318132","CVE-2025-32345"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2025-09-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2025-09-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/apps/Settings/+/dc41d27f1bd9ebab400a85e31e81315092fd9477"}],"affected":[{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-next:0"},{"fixed":"16-next:2025-09-01"}]}],"versions":["16-next"],"ecosystem_specific":{"severity":"High","spl":"2025-09-01","types":["EoP"],"vanir_signatures":[{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/ef801e1a8ec3a18ce9e0221fc7e1dfe495d0be8a","target":{"file":"src/com/android/settings/security/ContentProtectionTogglePreferenceController.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["38824363838564154734039279078854965383","37149770691856232147861424305688885915","247161014242972862965064184898659756474","317332585893001975143497678591949088166"]},"id":"ASB-A-409318132-1a6c98fe"},{"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/ef801e1a8ec3a18ce9e0221fc7e1dfe495d0be8a","target":{"file":"src/com/android/settings/security/ContentProtectionTogglePreferenceController.java","function":"updateState"},"deprecated":false,"digest":{"length":558,"function_hash":"213099471480070302545242104245220750403"},"id":"ASB-A-409318132-ecbe9302","signature_type":"Function","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/ef801e1a8ec3a18ce9e0221fc7e1dfe495d0be8a"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-409318132.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2025-09-01"}]}],"versions":["15"],"ecosystem_specific":{"vanir_signatures":[{"target":{"file":"src/com/android/settings/security/ContentProtectionTogglePreferenceController.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["38824363838564154734039279078854965383","37149770691856232147861424305688885915","247161014242972862965064184898659756474","317332585893001975143497678591949088166"]},"id":"ASB-A-409318132-827521d3","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/077aae694d85f7e1f2919977b15c19c7f21b1da2"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/077aae694d85f7e1f2919977b15c19c7f21b1da2","target":{"file":"src/com/android/settings/security/ContentProtectionTogglePreferenceController.java","function":"updateState"},"deprecated":false,"digest":{"function_hash":"213099471480070302545242104245220750403","length":558},"id":"ASB-A-409318132-ec9daf83"}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/077aae694d85f7e1f2919977b15c19c7f21b1da2"],"severity":"High","spl":"2025-09-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-409318132.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2025-09-01"}]}],"versions":["16"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"target":{"file":"src/com/android/settings/security/ContentProtectionTogglePreferenceController.java","function":"updateState"},"deprecated":false,"digest":{"function_hash":"213099471480070302545242104245220750403","length":558},"id":"ASB-A-409318132-4274b9ec","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/094c9df207d9bb430427dadc2e327b4834b57b01"},{"digest":{"line_hashes":["38824363838564154734039279078854965383","37149770691856232147861424305688885915","247161014242972862965064184898659756474","317332585893001975143497678591949088166"],"threshold":0.9},"id":"ASB-A-409318132-68b2aec9","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/094c9df207d9bb430427dadc2e327b4834b57b01","target":{"file":"src/com/android/settings/security/ContentProtectionTogglePreferenceController.java"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/094c9df207d9bb430427dadc2e327b4834b57b01"],"severity":"High","spl":"2025-09-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-409318132.json"}}],"schema_version":"1.9.0"}