CVE-2025-32347

HighCVSS 7.8/10Last modified Oct 1, 2026

Description

In onStart of BiometricEnrollIntroduction.java, there is a possible way to determine the device's location due to an unsafe PendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-926

Affected software

No affected versions have been published.

Timeline

Published: Sep 4, 2025
Last modified: Oct 1, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-323487.8In multiple locations, there is a possible background activity launch due to a missing permission check. This could lead to local escalation CVE-2025-323497.8In multiple locations, there is a possible privilege escalation due to a tapjacking/overlay attack. This could lead to local escalation of p CVE-2025-32359.8A vulnerability was found in PHPGurukul Old Age Home Management System 1.0. It has been classified as critical. This affects an unknown part CVE-2025-323507.8In maybeShowDialog of ControlsSettingsDialogManager.kt, there is a possible overlay of the ControlsSettingsDialog due to a tapjacking/overla CVE-2025-323524.8A type confusion vulnerability in lib/NSSAuthenticator.php in ZendTo before v5.04-7 allows remote attackers to bypass authentication for use CVE-2025-323538.2Kaseya Rapid Fire Tools Network Detective 2.0.16.0 has Unencrypted Credentials (for privileged access) stored in the collector.txt configura CVE-2025-323548.8In Zimbra Collaboration (ZCS) 9.0 through 10.1, a Cross-Site Request Forgery (CSRF) vulnerability exists in the GraphQL endpoint (/service/e CVE-2025-323557.3Rocket TRUfusion Enterprise through 7.10.4.0 uses a reverse proxy to handle incoming connections. However, the proxy is misconfigured in a w CVE-2025-323574.3In Zammad 6.4.x before 6.4.2, an authenticated agent with knowledge base permissions was able to use the Zammad API to fetch knowledge base CVE-2025-323584.1In Zammad 6.4.x before 6.4.2, SSRF can occur. Authenticated admin users can enable webhooks in Zammad, which are triggered as POST requests CVE-2025-323598.8In Zammad 6.4.x before 6.4.2, there is client-side enforcement of server-side security. When changing their two factor authentication config CVE-2025-32365.3A vulnerability was found in Tenda FH1202 1.2.0.14(408). It has been declared as critical. This vulnerability affects unknown code of the fi