{"id":"ASB-A-388828859", "published":"2025-06-01T00:00:00Z", "modified":"2026-04-29T15:10:00.007170452Z", "aliases":["CVE-2025-26445", "A-388828859"], "details":"In offerNetwork of ConnectivityService.java, there is a possible leak of sensitive data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/packages/modules/Connectivity", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16-next:0"}, {"fixed":"16-next:2025-06-01"}]}], "versions":["16-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/modules/Connectivity/+/2bde2fe348a9861786ff4cbda8e46e9ffca26bf7"], "severity":"High", "spl":"2025-06-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["262396038357104497907984848060117163787", "54130136488940096754733008694694426325", "9852743213078760651811842745914440046", "61620647746723102817967400451463051865"], "threshold":0.9}, "id":"ASB-A-388828859-71d4d8a8", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Connectivity/+/2bde2fe348a9861786ff4cbda8e46e9ffca26bf7", "target":{"file":"service/src/com/android/server/ConnectivityService.java"}}, {"deprecated":false, "digest":{"function_hash":"126951957245545320111530138522786059857", "length":489}, "id":"ASB-A-388828859-a3910417", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Connectivity/+/2bde2fe348a9861786ff4cbda8e46e9ffca26bf7", "target":{"file":"service/src/com/android/server/ConnectivityService.java", "function":"offerNetwork"}}]}}, {"package":{"name":"platform/packages/modules/Connectivity", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"15:0"}, {"fixed":"15:2025-06-01"}]}], "versions":["15"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/modules/Connectivity/+/2bde2fe348a9861786ff4cbda8e46e9ffca26bf7"], "severity":"High", "spl":"2025-06-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["262396038357104497907984848060117163787", "54130136488940096754733008694694426325", "9852743213078760651811842745914440046", "61620647746723102817967400451463051865"], "threshold":0.9}, "id":"ASB-A-388828859-1a0e4e98", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Connectivity/+/2bde2fe348a9861786ff4cbda8e46e9ffca26bf7", "target":{"file":"service/src/com/android/server/ConnectivityService.java"}}, {"deprecated":false, "digest":{"function_hash":"126951957245545320111530138522786059857", "length":489}, "id":"ASB-A-388828859-48eec298", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Connectivity/+/2bde2fe348a9861786ff4cbda8e46e9ffca26bf7", "target":{"file":"service/src/com/android/server/ConnectivityService.java", "function":"offerNetwork"}}]}}, {"package":{"name":"platform/packages/modules/Connectivity", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"13:0"}, {"fixed":"13:2025-06-01"}]}], "versions":["13"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/modules/Connectivity/+/f27bca2d7d236008f46e8c67154d7c2118a9fbf5"], "severity":"High", "spl":"2025-06-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"126951957245545320111530138522786059857", "length":489}, "id":"ASB-A-388828859-15e2a349", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Connectivity/+/f27bca2d7d236008f46e8c67154d7c2118a9fbf5", "target":{"file":"service/src/com/android/server/ConnectivityService.java", "function":"offerNetwork"}}, {"deprecated":false, "digest":{"line_hashes":["262396038357104497907984848060117163787", "54130136488940096754733008694694426325", "9852743213078760651811842745914440046", "61620647746723102817967400451463051865"], "threshold":0.9}, "id":"ASB-A-388828859-eb5f997e", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Connectivity/+/f27bca2d7d236008f46e8c67154d7c2118a9fbf5", "target":{"file":"service/src/com/android/server/ConnectivityService.java"}}]}}, {"package":{"name":"platform/packages/modules/Connectivity", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"14:0"}, {"fixed":"14:2025-06-01"}]}], "versions":["14"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/modules/Connectivity/+/27b011caf2edb02e550e1f8aa2eae3e2066d27b3"], "severity":"High", "spl":"2025-06-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["262396038357104497907984848060117163787", "54130136488940096754733008694694426325", "9852743213078760651811842745914440046", "61620647746723102817967400451463051865"], "threshold":0.9}, "id":"ASB-A-388828859-17003266", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Connectivity/+/27b011caf2edb02e550e1f8aa2eae3e2066d27b3", "target":{"file":"service/src/com/android/server/ConnectivityService.java"}}, {"deprecated":false, "digest":{"function_hash":"126951957245545320111530138522786059857", "length":489}, "id":"ASB-A-388828859-9713238c", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Connectivity/+/27b011caf2edb02e550e1f8aa2eae3e2066d27b3", "target":{"file":"service/src/com/android/server/ConnectivityService.java", "function":"offerNetwork"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2025-06-01"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/packages/modules/Connectivity/+/0eccf35b6b1b123996ee41e4cc078cf79c35be89"}]}