CVE-2025-0092
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-08-26

Last updated on: 2025-09-02

Assigner: Android (associated with Google Inc. or Open Handset Alliance)

Description
In handleBondStateChanged of AdapterService.java, there is a possible permission bypass due to misleading or insufficient UI. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-08-26
Last Modified
2025-09-02
Generated
2026-06-16
AI Q&A
2025-08-27
EPSS Evaluated
2026-06-15
NVD
CVE-2025-0092
EUVD
EUVD-2025-25852
Affected Vendors & Products
Showing 5 associated CPEs
Vendor Product Version / Range
google android 12.0
google android 12.1
google android 13.0
google android 14.0
google android 15.0
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-345 The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.
CWE-356 The product's user interface does not warn the user before undertaking an unsafe action on behalf of that user. This makes it easier for attackers to trick users into inflicting damage to their system.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability occurs in the handleBondStateChanged method of AdapterService.java, where there is a possible permission bypass caused by misleading or insufficient user interface. This flaw could allow an attacker in close proximity to disclose information remotely without needing additional execution privileges. Exploitation requires user interaction.

Impact Analysis

The vulnerability can lead to unauthorized disclosure of information to a nearby attacker without requiring extra privileges, potentially compromising sensitive data. Since user interaction is needed, the risk depends on user behavior and environment.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-0092. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart