Bypass of User Consent in Android DownloadProvider by Google

CVE-2025-26417

What is CVE-2025-26417?

In the Android DownloadProvider, a vulnerability exists in the checkWhetherCallingAppHasAccess method that allows for a bypass of user consent when accessing files stored in shared storage. This vulnerability stems from a confused deputy scenario, enabling local information disclosure without requiring additional execution privileges or user interaction. This could potentially expose sensitive information to malicious actors.

References